Skip to content
OpenAdvisories

Vendor

wandb

7 known vulnerabilities.

Products

OpenUI 4 wandb/openui 2 wandb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-91771

    Weights & Biases wandb before 0.29.0 Path Traversal via File Download

    Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write file…

    wandb wandb