CVE-2021-41127: Rasa - Crafted model.tar.gz file can overwrite or replace bot files
Summary
CVE-2021-41127: Rasa is an open source machine learning framework to automate text-and voice-based conversations. Affects rasa across 2 version ranges.
< 1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
< 2.8.10
Fixed in 1b6b502f52d73b4f8cd1959ce724b8ad0eb33989. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Rasa is an open source machine learning framework designed to automate text and voice-based conversations. It provides functionality for loading trained model tar.gz files. Rasa allows users to build conversational AI bots and deploy them in various applications. However, a vulnerability exists in Rasa versions prior to 2.8.10, where a malicious actor can create a specially crafted model.tar.gz file that can overwrite or replace bot files in the bot directory.
Vulnerability Detail
The vulnerability arises from the insecure handling of the model.tar.gz file. By uploading a malicious model.tar.gz file, an attacker can manipulate the contents of the bot directory, potentially leading to unauthorized access, data loss, or the execution of arbitrary code. This vulnerability poses a significant risk to Rasa instances deployed in production environments. The issue has been addressed in Rasa version 2.8.10.
How To Fix
Latest published version: 3.6.21 as of 22 Oct 2026
pip install --upgrade "rasa==3.6.21"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1b6b502f52d73b4f8cd1959ce724b8ad0eb33989
This is the first release that contains the fix.
pip install --upgrade "rasa==1b6b502f52d73b4f8cd1959ce724b8ad0eb33989"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is crucial to update to the fixed version of Rasa to mitigate the risk.
Conclusion
The vulnerability in Rasa allows a malicious actor to manipulate bot files by uploading a specially crafted model.tar.gz file. To mitigate this risk, it is crucial to update Rasa to version 2.8.10 or later and avoid uploading untrusted model files. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for rasa →
FAQ
Rasa is an open source machine learning framework used for building conversational AI bots.
This vulnerability allows a malicious actor to overwrite or replace bot files, potentially leading to unauthorized access, data loss, or arbitrary code execution.
To fix this vulnerability, update Rasa to version 2.8.10 or later and ensure that untrusted model files are not uploaded.
Yes, all versions prior to 2.8.10 are affected by this vulnerability.
No specific workaround is available. Updating to the fixed version is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for rasa.
