A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.
Last checked: 2026-10-05 21:13 UTC
Proof of concept · CISA Coordinator (Assessed 2026-10-05 20:03 UTC)
Fix evidence last checked: 2026-10-07 00:40 UTC