TRA-2026-37
Model registry path traversal overwrites serving artifacts
Archive names in uploaded model bundles are joined to the storage path unchecked, so a project member can replace another team's production model.
- Patched
- AI & LLM
CVSS 3.1 base score
7.7high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N - Vendor
- Fathom AI
- Product
- Fathom MLOps Platform
- CVE
- CVE-2026-35512
- Disclosure
- to74 days
- Researchers
- Sofia Brandt
Score breakdown
Exploitability
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
Scope
- Scope
- Changed
Impact
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| Fathom MLOps Platform | 3.2.0 – 3.5.1 | 3.5.2 |
Read the research
Questions about this advisory
research@tenable.comOn this page6 sections
Synopsis
Archive names in uploaded model bundles are joined to the storage path unchecked, so a project member can replace another team’s production model.
Proof of concept
Tenable has shared a proof of concept with Fathom AI. It is not published here, to give operators time to apply the fix.
Solution
Upgrade to 3.5.2 or later, which normalises archive member paths and rejects entries that resolve outside the project directory.
Disclosure timeline
Tenable reports the issue to Fathom AI
TRA-2026-37 published
74 days from report to publication, against a 90-day policy.How we disclose