Which versions of UpTrain are affected by EUVD-2025-210735?

UpTrain versions 0.7.1 and prior contain a remote code execution vulnerability in the `/add_prompts` API endpoint that allows authenticated users to execute arbitrary commands within containerized…

How to fix or mitigate EUVD-2025-210735?

Within 24 hours: identify all UpTrain deployments and document versions in use; immediately restrict network access to the `/add_prompts` endpoint using firewall rules or network policies; review application access logs for suspicious activity on this endpoint. Within 7 days: audit and strengthen authentication controls to limit API access to only required users and systems; implement Web Application Firewall rules to monitor and log POST requests to `/add_prompts` with unusual `checks` or `metadata` parameters; enable enhanced logging and alerting on container-level command execution. Within 30 days: contact UpTrain for patch availability and timelines; evaluate migrating to a patched version immediately upon release; if patch is unavailable beyond 30 days, conduct risk assessment and consider deprovisioning UpTrain in favor of patched alternatives.

UpTrain EUVD-2025-210735

Q: What is the CVSS score of EUVD-2025-210735?

EUVD-2025-210735 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

| CVE-2025-27771 HIGH

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-08-17 security-advisories@github.com

Docker RCE

7.4

CVSS 4.0 · Vendor: github

Severity by source

Vendor (github) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable endpoint exploitable by any authenticated low-privilege user with no user interaction; full impact on the container/process scope unchanged.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 16:30 vuln.today

CVE Published

Aug 17, 2026 - 16:16 cve.org

HIGH 7.4

DescriptionCVE.org

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /add_prompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able to execute arbitrary code in the context of the host running UpTrain, which in most cases will be the docker container as suggested by the documentation. As of time of publication, no known patch is available.

Articles & Coverage 2

News 4 New Docker Vulnerabilities - 4 High Severity, 1 With POC Aug 18, 2026 News 3 New Docker Vulnerabilities - 3 High Severity Patched Aug 17, 2026

AnalysisAI

Remote code execution in UpTrain's /add_prompts API endpoint allows any authenticated user to execute arbitrary commands on the host system by injecting malicious payloads into the checks or metadata parameters. Affected versions are 0.7.1 and prior, and deployments following the official documentation run inside Docker containers, meaning successful exploitation grants control of the container environment. GitHub Security Lab (GHSL-2024-200/201) has published an advisory and the CVSS 4.0 E:P modifier confirms publicly available proof-of-concept exploit code exists; no vendor-released patch has been issued as of time of publication.

Technical ContextAI

UpTrain is an open-source Python-based platform for evaluating and improving generative AI applications. The vulnerable endpoint /add_prompts is implemented in uptrain/dashboard/backend/app.py (line 773) and accepts user-controlled checks and metadata parameters. The root cause is CWE-74 (Improper Neutralization of Special Elements used by a Downstream Component - Injection): user-supplied input in these parameters is passed to a downstream execution context without adequate sanitization, allowing the interpreter or evaluation engine to treat attacker-controlled data as executable instructions. Because UpTrain's documentation recommends Docker-based deployment, the immediate execution context is typically a container, which limits host-level blast radius but still represents full container compromise including file access, network pivoting, and potential container escape depending on the runtime configuration.

RemediationAI

No vendor-released patch identified at time of analysis. Organizations running UpTrain should immediately apply the following compensating controls: First, restrict access to the UpTrain dashboard and API exclusively to trusted internal users via network-level controls (firewall rules, VPN enforcement, or reverse proxy ACLs) - this reduces the authenticating-user threat pool to known personnel. Second, disable or block the /add_prompts endpoint entirely at the reverse proxy or application firewall layer if prompt management functionality is not required; note this will break prompt configuration workflows. Third, review and harden Docker container runtime settings: ensure containers run with minimal Linux capabilities (drop CAP_SYS_ADMIN and similar), enforce read-only filesystems where possible, and use non-root container users to limit post-exploitation impact. Fourth, audit UpTrain access logs for any anomalous calls to /add_prompts with unexpected parameter structures as a detection measure. Monitor the upstream GitHub repository at https://github.com/uptrain-ai/uptrain and the GitHub Security Lab advisory at https://securitylab.github.com/advisories/GHSL-2024-200_GHSL-2024-201_Uptrain/ for patch availability.