The vulnerability is a relative path traversal that occurs during the extraction of model archives in Amazon Web Services Multi Model Server versions 1.1.11 and earlier. A crafted archive can cause the server to write files outside the intended extraction directory, enabling attackers to inject and execute arbitrary code on the host that runs the Multi Model Server. This flaw falls under CWE‑23 and results in a denial of the isolation boundary protecting the server’s filesystem, allowing full compromise at the host level.

The affected product is Amazon Web Services Multi Model Server, version 1.1.11 and earlier. The product is end‑of‑life and no patched release is available.

The CVSS score of 9.3 classifies this flaw as critical, indicating a high impact if exploited. The EPSS score is not available, but the lack of a fix and the absence of a KEV listing suggest that while exploitation may be possible, it is not currently widespread. An attacker who can upload a malicious model archive to the vulnerable server can trigger the traversal and execute code remotely, which means the threat is active for any remaining deployments of the legacy Multi Model Server.