Which versions of UpTrain are affected by EUVD-2025-210736?

UpTrain versions 0.7.1 and prior contain a vulnerability allowing authenticated users to gain unauthorized code execution on systems running the platform.

How to fix or mitigate EUVD-2025-210736?

Within 24 hours: identify all UpTrain deployments in your environment and document their version numbers and network exposure; immediately restrict API access via firewall rules or network segmentation to only trusted internal sources that require the /new_run endpoint, as publicly available exploit code exists for this vulnerability. Within 7 days: implement application-level input validation and disable the /new_run endpoint if not actively required for business operations; audit recent API logs for suspicious `checks` or `metadata` parameter values that may indicate exploitation attempts. Within 30 days: establish a monitoring schedule for UpTrain security advisories and prepare a migration plan to alternative model evaluation platforms or wait for vendor patches; review and strengthen access controls for service accounts that can authenticate to UpTrain.

UpTrain EUVD-2025-210736

Q: What is the CVSS score of EUVD-2025-210736?

EUVD-2025-210736 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

| CVE-2025-27772 HIGH

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-08-17 security-advisories@github.com

Docker RCE

7.4

CVSS 4.0 · Vendor: github

Severity by source

Vendor (github) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-accessible API requires only low-privileged auth (PR:L); no scope change since impact stays within the container boundary; full C/I/A impact reflects arbitrary code execution.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 16:32 vuln.today

CVE Published

Aug 17, 2026 - 16:16 cve.org

HIGH 7.4

DescriptionCVE.org

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /new_run endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able to execute arbitrary code in the context of the host running UpTrain, which in most cases will be the docker container as suggested by the documentation. As of time of publication, no known patch is available.

Articles & Coverage 2

News 4 New Docker Vulnerabilities - 4 High Severity, 1 With POC Aug 18, 2026 News 3 New Docker Vulnerabilities - 3 High Severity Patched Aug 17, 2026

AnalysisAI

Remote code execution in UpTrain 0.7.1 and prior allows authenticated users to execute arbitrary commands on the host system via the /new_run API endpoint. The checks and metadata parameters are unsanitized, enabling injection attacks (CWE-74) that run in the context of the underlying process - typically a Docker container per the official deployment documentation. Publicly available exploit code exists (CVSS 4.0 E:P per GitHub Security Lab advisory GHSL-2024-200/201), and no vendor-released patch has been identified at time of publication.

Technical ContextAI

UpTrain is a Python-based open-source platform for evaluating and improving generative AI pipelines. Its dashboard backend (uptrain/dashboard/backend/app.py, line 773) exposes a /new_run endpoint that accepts checks and metadata parameters. CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component - Injection) identifies the root cause: user-supplied input is processed without adequate sanitization or sandboxing, allowing the interpreter to treat attacker-controlled data as executable instructions. The vulnerability is backend-side and does not require client-side rendering, eliminating any UI-based mitigations. Deployment is typically containerized via Docker, which the project documentation recommends, meaning exploitation impacts the container process and any mounted volumes or credentials accessible within it.

RemediationAI

No vendor-released patch has been identified at time of publication. Organizations should immediately assess exposure and apply the following specific compensating controls. First, restrict network access to the UpTrain dashboard to trusted internal networks or VPN only - block public internet access to the service at the firewall or load balancer level, as this eliminates the network-accessible attack vector. Second, enforce strict authentication controls and audit which accounts hold valid credentials to the UpTrain instance, revoking any unnecessary access; this directly raises the bar beyond the PR:L threshold. Third, if UpTrain is not actively required for production workloads, consider temporarily suspending the instance until a patch is released. Fourth, harden the Docker container runtime by avoiding mounting sensitive host paths, secrets, or credentials into the container, limiting the blast radius if exploitation occurs. Monitor the upstream GitHub repository at https://github.com/uptrain-ai/uptrain for patch releases and apply immediately upon availability. Trade-off note: restricting network access may interrupt legitimate remote users of the evaluation platform.