Multi Model Server
Monthly
Relative path traversal during model archive extraction in AWS Multi Model Server 1.1.11 and earlier allows unauthenticated remote actors to write files outside the intended model directory and achieve arbitrary code execution. AWS rates the flaw CVSS 4.0 9.3 (Critical) and has declared the product end of life, so no fixed version will ship; the vendor's guidance is to discontinue use and migrate to a supported model-serving solution. No public exploit code or confirmed active exploitation was identified at time of analysis, and realistic remote exploitation depends on the model registration/load endpoint being reachable rather than bound to localhost.
Server-side request forgery in AWS Multi Model Server 1.1.11 and earlier lets remote attackers steer the model download path at internal network destinations by supplying a crafted model URL, so the server itself issues the request into a separate internal trust boundary (CVSS 5.8, scope-changed, confidentiality-only impact). The vendor has declared the project end of life and states that no fixed version is available, so the only supported remediation is to discontinue use and migrate to a supported model-serving solution. No public exploit identified at time of analysis, and the real-world exposure hinges on whether the model-management/download interface is reachable by the attacker in a given deployment, which the available sources do not state.
Relative path traversal during model archive extraction in AWS Multi Model Server 1.1.11 and earlier allows unauthenticated remote actors to write files outside the intended model directory and achieve arbitrary code execution. AWS rates the flaw CVSS 4.0 9.3 (Critical) and has declared the product end of life, so no fixed version will ship; the vendor's guidance is to discontinue use and migrate to a supported model-serving solution. No public exploit code or confirmed active exploitation was identified at time of analysis, and realistic remote exploitation depends on the model registration/load endpoint being reachable rather than bound to localhost.
Server-side request forgery in AWS Multi Model Server 1.1.11 and earlier lets remote attackers steer the model download path at internal network destinations by supplying a crafted model URL, so the server itself issues the request into a separate internal trust boundary (CVSS 5.8, scope-changed, confidentiality-only impact). The vendor has declared the project end of life and states that no fixed version is available, so the only supported remediation is to discontinue use and migrate to a supported model-serving solution. No public exploit identified at time of analysis, and the real-world exposure hinges on whether the model-management/download interface is reachable by the attacker in a given deployment, which the available sources do not state.