Skip to content
OpenAdvisories

Product · cohere-ai

cohere-python

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-108597

    Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction

    Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix …

    cohere-ai cohere-python