Vulnerability · Published Oct 27, 2026 · Assigned by VulDB

CVE-2026-117509crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal

Medium 6.3

In plain English

A medium-severity path traversal in Rasa_NLU_Chi from crownpku. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.4%top 64.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products (as reported)

Vendor	Product	Versions
crownpku	Rasa_NLU_Chi	0.12.00.12.10.12.2

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References

VDB-427075 | crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal vdb-entry, technical-description
VDB-427075 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-117509 | CVE Analysis and Report third-party-advisory
Submit #1024527 | crownpku Rasa_NLU_Chi 0.12.2, commit f995c06e5aee5b6f68ea877c1a271667357a1c68 Path Traversal third-party-advisory
https://github.com/crownpku/Rasa_NLU_Chi/issues/138 issue-tracking
https://github.com/user-attachments/files/33302165/poc.zip exploit
https://github.com/crownpku/Rasa_NLU_Chi/ product