A path‑traversal flaw exists in Kedro version 1.2.0 where the version supplied to the CLI or the internal _get_versioned_path function is interpolated directly into a filesystem path without validation. The vulnerability allows an attacker to craft a version string that includes directory‑traversal sequences, enabling reads of files outside the intended dataset directory. This can lead to data leakage, corruption or poisoning, and cross‑project or cross‑tenant information exposure in automated or orchestrated pipelines.

The affected product is Kedro from kedro-org. Version 1.2.0 is vulnerable. No other versions are listed as affected in the current data.

The CVSS score of 7.1 indicates a high severity of this flaw. Because the EPSS score is not available, the current exploitation likelihood cannot be quantified, and the vulnerability is not present in the CISA KEV catalog. The attack vector is inferred to be local or remote, depending on who can supply the version parameter – the CLI parameter "--load-versions" exposes an attacker to the ability to embed traversal components when invoking Kedro commands. No known exploit code or public proof of concept is reported in the references. The weakness is classified as CWE-22 (Path Traversal).