EUVD-2026-71119
GHSA-5h56-hf5q-phrw
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network dispatch with no allowlist yields C/I/A:H (data read, run deletion, and vendor-claimed RCE); scope unchanged as impact stays on the tracking host.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs.
AnalysisAI
Unauthenticated remote method dispatch in the Aim 3.29.1 ML experiment-tracking server lets attackers reach the tracking RPC endpoint without any credentials and invoke arbitrary methods via an unguarded getattr call. Because there is no allowlist, an attacker can register a client, instantiate Repo resources, and call methods that read experiment data or delete runs; VulnCheck's advisory frames the same dispatch primitive as achieving full remote code execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires network reachability to Aim 3.29.1's remote tracking server (the transport RPC endpoint in aim/ext/transport/server.py); the server must be running in remote-tracking mode and be reachable by the attacker. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high priority where the tracking server is network-reachable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version is identified at time of analysis - the input references a GitHub issue (aimhubio/aim#3412) and a VulnCheck advisory but no tagged fixed release, so upstream fix status is unconfirmed; monitor https://github.com/aimhubio/aim/issues/3412 and the VulnCheck advisory for a patched version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and isolate all systems running Aim ≤3.29.1 by restricting network access to the tracking RPC endpoint to trusted internal subnets only and considering offline deployment for instances handling sensitive data. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any fi
A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim project, specifically within the
A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit the `tarfile.extractall()` function to extr
aimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to perform actions such as deleting
Aim is an open-source, self-hosted machine learning experiment tracking tool. Rated high severity (CVSS 8.6), this vulne
In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() function fro
In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-spec
In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of t
In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. Rated high severity (CVSS 7.5), this vulner
A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. Rated high severity (CVSS 7.
In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, cau
A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tr
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today