Skip to content
OpenAdvisories

Product · aimhubio

aim

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Aim 3.29.1 Remote Code Execution via Unauthenticated Method Dispatch

    Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read ex…