Skip to content
OpenAdvisories
High · 7.5 CVE-2026-107377 EUVD-2026-95134GHSA-77xj-x4rm-935cPYSEC-2026-4205

datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Published Oct 8, 2026 · Updated Oct 14, 2026 · Assigned by GitHub_M

Description

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _write_missing_weak_imports in src/datamodel_code_generator/parser/protobuf.py. Exploitation requires a victim or automated job to process the attacker-controlled schema with Protobuf input support, which requires the grpcio-tools package. The paths escape the weak_imports temporary directory before protoc runs, allowing creation of directory trees and new files or overwrite of existing writable files with a generated Protobuf syntax declaration. The effect persists when later Protobuf compilation fails. The written content is limited to a proto2 or proto3 syntax declaration, and direct arbitrary code execution has not been demonstrated. This issue is fixed in version 0.81.0.

Affected products

VendorProductAffectedFixed
datamodel-code-generator datamodel-code-generator >= 0.59.0, < 0.81.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 python-datamodel-code-generator No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-datamodel-code-generator 0.83.0-1.1 openSUSE-SU-2026:12096-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI datamodel-code-generator >= 0.59.0, < 0.81.0 0.81.0 GHSA-77xj-x4rm-935c

Advisories 1

References