Vendor
An unauthenticated path traversal vulnerability (CVE-2026-75111) in the Evidently UI dataset materialization endpoint allows attackers to read arbitrary files from the host system.