When processed, the application attempts to access the specified file outside of the intended workspace directory. The resulting data is then materialized into a dataset, which the attacker can subsequently retrieve via the standard download functionality. This allows for the exfiltration of sensitive system files, configuration data, or other proprietary information accessible to the service process. The issue has been identified in the data_source.py module of the Evidently repository.

Impact

Successful exploitation of this vulnerability enables unauthorized reading of arbitrary files on the host system. This could lead to the exposure of sensitive configuration files, environment variables, source code, or internal application data. Given the unauthenticated nature of the exploit, this vulnerability poses a significant risk to any publicly or internally accessible instances of the Evidently UI.

Recommendation

• Upgrade to Evidently version 0.7.22 or later immediately to patch the validation logic in the dataset materialization endpoint.
• Restrict access to the Evidently UI service to trusted network segments, ideally requiring VPN or zero-trust authentication until the patch is applied.
• Deploy the detection rule below to identify exploitation attempts targeting the dataset materialization endpoint.
• Audit web server logs for suspicious requests containing path traversal patterns (e.g., ../) targeting the /datasets/ or materialization-related URI paths.