CVE-2026-114040

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-114040

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114040.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-114040

Published

2026-10-21T03:45:17Z

Modified

2026-10-22T02:49:07Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal

Details

A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114040.json"
}

References

Affected packages

Git / github.com/dt42/berrynet

Affected ranges

Type

GIT

Repo

https://github.com/dt42/berrynet

Events

Introduced

0a60645aaa12d5a245d846048440f112d188ef67

Last Affected

7079e49418b1ef0a55764762699140451c5a13fa

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "3.10.0"
                },
                {
                    "last_affected":  "3.10.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.10.1"
                },
                {
                    "last_affected":  "3.10.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "3.10.2"
                },
                {
                    "last_affected":  "3.10.2"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

3.*

3.10.0

3.10.1

3.10.2

v3.*

v3.10.0

v3.10.1

v3.10.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114040.json"