CVE-2025-51481: Dagster Local File Inclusion Vulnerability
Summary
CVE-2025-51481: Dagster Local File Inclusion vulnerability. Affects dagster versions < 1.10.16. Fixed in 1.10.16. How to fix ↓
Also tracked for
- dagster-ge · PyPI
The same CVE-2025-51481 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dagster is an open-source data orchestrator designed for developing and maintaining data pipelines. It provides a framework for building, scheduling, and monitoring data workflows, making it easier for data teams to collaborate and manage complex data processes. However, a vulnerability has been identified that allows unauthorized access to local files through improper validation of input paths.
Vulnerability Detail
The vulnerability exists in the function dagster._grpc.impl.get_notebook_data within Dagster version 1.10.14. It allows attackers with access to the gRPC server to exploit path traversal sequences in the notebook_path field of ExternalNotebookData requests. This bypasses the intended extension-based checks, enabling attackers to read arbitrary files on the server. The potential ramifications include unauthorized data exposure, which could lead to sensitive information being compromised.
How To Fix
Latest published version: 1.13.26 as of 22 Oct 2026
pip install --upgrade "dagster==1.13.26"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.10.16
This is the first release that contains the fix.
pip install --upgrade "dagster==1.10.16"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the gRPC server to trusted users only. Additionally, implement input validation to sanitize the notebook_path field and prevent path traversal attacks.
Conclusion
In summary, CVE-2025-51481 is a Local File Inclusion vulnerability in Dagster that can lead to unauthorized file access. Users are advised to update to version 1.10.16 or later to mitigate this risk. Implementing additional security measures and using tools like Vulert can help monitor and protect against such vulnerabilities.
See every vulnerability recorded for dagster →
FAQ
CVE-2025-51481 is a vulnerability in Dagster that allows local file inclusion through improper validation of input paths.
The vulnerability affects Dagster versions prior to 1.10.16, specifically version 1.10.14.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The consequences include unauthorized access to sensitive files on the server, which could lead to data breaches.
The CVSS score of this vulnerability is 6.6, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for dagster.
