BerryNet CVE-2026-114040

Exploitation requires low-privilege authenticated access to BerryNet (PR:L) and passive user interaction (UI:P), after which the attacker supplies a crafted 'label' argument containing path-traversal sequences to the DLModelManager.get_model_meta function in berrynet/dlmodelmgr.py (the Model Package Metadata Handler). The attack reaches the vulnerable code only through this model-package metadata code path, and impact is limited to low confidentiality disclosure (reading file metadata outside the intended model directory) with no write/integrity or availability effect. Limiting factors: an attacker must already hold valid low-level credentials, user interaction is needed to trigger the flow, and affected scope is BerryNet versions up to and including 3.10.2 with no vendor patch confirmed.

This is a low-priority issue despite being remotely reachable. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N) yields a base score of only 2.0, which is consistent across all signals: the attacker needs at least low-level privileges (PR:L), passive user interaction is required (UI:P), and the only impact is limited confidentiality (VC:L) with no integrity or availability effect - appropriate for a path-traversal read primitive bounded to model-metadata file access. Exploit maturity is flagged as proof-of-concept (E:P), and a POC is publicly available per VulDB/GitHub, so publicly available exploit code exists but there is no confirmation of active exploitation. No EPSS score and no CISA KEV listing were provided in the input; absence of KEV is consistent with the low severity and the targeted, authenticated nature of the flaw. The signals do not conflict - a low-privilege, low-confidentiality traversal in a niche edge-AI project is a genuine low-risk item. One caveat: the vendor (DT42) was notified via GitHub issue #82 and has not responded, so no official patch is confirmed, meaning the vulnerability likely remains unfixed in current releases.

An attacker who already has low-privilege access to a BerryNet deployment submits a model-package request where the 'label' argument is crafted with directory-traversal sequences (e.g. '../'), causing DLModelManager.get_model_meta in dlmodelmgr.py to read file metadata outside the intended model directory. A public proof-of-concept (poc.zip) is available, lowering the effort to reproduce, but exploitation requires existing authenticated access and passive user interaction, limiting real-world impact to disclosure of limited file information.