01data-ai/joblib_f005_memmapping_context_traversal

F005 Path Traversal Evidence Pack

Finding: F005 Title: Path traversal in joblib memmapping context_id escapes temp folder and normal cleanup deletes outside directory Date UTC: 2026-05-01T10:23:38+00:00

Primary confirmed facts:

• joblib 1.5.3 accepts context_id='../../../victim' through get_memmapping_executor.
• The registered and resolved temp folder path escapes the configured safe_root.
• After set_current_context(payload), memmapping writes .pkl files into the escaped victim directory.
• terminate(kill_workers=True) deletes the escaped victim directory in the lifecycle matrix.
• Normal interpreter shutdown / atexit also deletes the escaped victim directory.
• The live target health endpoint confirmed Python 3.10.20, joblib 1.5.3, and NumPy 2.2.6.

Important limits:

• This is a local/library API primitive unless a service exposes context_id remotely.
• This evidence does not claim successful HTTP exploitation through ts.01data.ai routes.
• Impact is within the filesystem permissions of the running process.

Key evidence:

• evidence/07_f005_exhaust_lifecycle_matrix_output.txt
• evidence/08_f005_decisive_lifecycle_verdicts.txt
• evidence/09_f005_lifecycle_tail_excerpt.txt
• evidence/03_f005_real_get_memmapping_executor_output.txt
• evidence/05_f005_real_executor_manager_cleanup_output.txt
• source/SOURCE_REFERENCES.md
• raw_http/01_live_health.txt