CRITICAL VULNERABILITIES FOUND IN OPEN SOURCE AI/ML PLATFORMS

Summary from the TLDR InfoSec newsletter

Huntr researchers recently discovered multiple high-severity vulnerabilities in popular AI/ML solutions like MLflow, ClearML, and Hugging Face. The most critical issues are in MLflow, including a path traversal bug allowing file deletion (CVE-2023-6831) and a data module flaw enabling path manipulation to overwrite files and achieve RCE