---
id: CVE-2026-35492
aliases:
  - GHSA-cjg8-h5qc-hrjv
  - PYSEC-2026-2545
title: >-
  kedro-datasets has a path traversal vulnerability in PartitionedDataset that
  allows arbitrary file write
summary: >-
  kedro-datasets has a path traversal vulnerability in PartitionedDataset that
  allows arbitrary file write
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
vendor: kedro-datasets
product: kedro-datasets
ecosystem: pip
affected:
  - kedro-datasets < 9.3.0
patched:
  - kedro-datasets 9.3.0
published: '2026-04-06'
updated: '2026-07-13'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-cjg8-h5qc-hrjv'
references:
  - url: >-
      https://github.com/kedro-org/kedro-plugins/security/advisories/GHSA-cjg8-h5qc-hrjv
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-35492'
  - url: 'https://github.com/kedro-org/kedro/issues/5452'
  - url: 'https://github.com/kedro-org/kedro-plugins/pull/1346'
  - url: >-
      https://github.com/kedro-org/kedro-plugins/commit/65115f76b872217317734b6bde8927170c98fc4b
  - url: 'https://github.com/kedro-org/kedro-plugins'
  - url: >-
      https://github.com/kedro-org/kedro-plugins/releases/tag/kedro-datasets-9.3.0
tags:
  - osv
  - pip
  - exploit-available
epss: 0.00447
epssPercentile: 0.36268
ingestedAt: '2026-07-13T18:57:56.712Z'
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/redyank/CVE-2026-35492'
  checkedAt: '2026-09-26T09:05:42.732Z'
exploitAvailable: true
---

## Overview

### Impact

PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured dataset directory, potentially overwriting arbitrary files on the filesystem.
Users of PartitionedDataset with any storage backend (local filesystem, S3, GCS, etc.) are affected.

### Patches
Yes. The vulnerability has been patched in kedro-datasets version 9.3.0.
Users should upgrade to kedro-datasets >= 9.3.0. The fix normalizes constructed paths using `posixpath.normpath` and validates that the resolved path remains within the dataset base directory before use, raising a `DatasetError` if the path escapes the base directory.

### Workarounds
Users who cannot upgrade should validate partition IDs before passing them to PartitionedDataset, ensuring they do not contain `..` path components.

### References
Fix: https://github.com/kedro-org/kedro-plugins/pull/1346
Report: https://github.com/kedro-org/kedro/issues/5452

## Affected packages

- `kedro-datasets < 9.3.0`

## Remediation

Upgrade to a patched release:

- `kedro-datasets 9.3.0`