---
id: CVE-2021-41127
aliases:
  - GHSA-4365-fhm5-qcrx
  - PYSEC-2021-381
title: Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
summary: Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H'
vendor: rasa
product: rasa
ecosystem: pip
affected:
  - rasa < 2.8.10
patched:
  - rasa 2.8.10
published: '2021-10-22'
updated: '2026-07-08'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-4365-fhm5-qcrx'
references:
  - url: 'https://github.com/RasaHQ/rasa/security/advisories/GHSA-4365-fhm5-qcrx'
  - url: >-
      https://github.com/RasaHQ/rasa/commit/1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
  - url: 'https://github.com/RasaHQ/rasa'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/rasa/PYSEC-2021-381.yaml
tags:
  - osv
  - pip
epss: 0.00758
epssPercentile: 0.53227
ingestedAt: '2026-07-08T18:25:45.232Z'
---

## Overview

### Impact
An Archive Extraction (Zip Slip) vulnerability in the functionality that allows a user to load a trained model archive in Rasa 2.8.9 and older allows an attacker arbitrary write capability within specific directories using a malicious crafted archive file.

### Patches
The vulnerability is fixed in Rasa 2.8.10

### Workarounds
Mitigating steps for vulnerable end users are to ensure that they do not upload untrusted model files, and restrict CLI or API endpoint access where a malicious actor could target a deployed Rasa instance.

### For more information
If you have any questions or comments about this advisory:
* Email [the Rasa Security Team](mailto:security@rasa.com)


## Affected packages

- `rasa < 2.8.10`

## Remediation

Upgrade to a patched release:

- `rasa 2.8.10`