Skip to content
OpenAdvisories

Vendor

Allegro.AI

9 known vulnerabilities.

Products

ClearML 6 allegroai/clearml 2 allegroai/clearml-server 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-8917

    Path Traversal Leading to Remote Code Execution in allegroai/clearml

    A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the `safe_extract` function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting…

    Allegro.AI allegroai/clearml clearml PyPI
  • Medium 6.0
    CVE-2024-24595

    Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

    Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

    Allegro.AI ClearML clearml PyPI
  • Medium 5.4
    CVE-2023-6778

    Cross-site Scripting (XSS) - Stored in allegroai/clearml-server

    Cross-site Scripting (XSS) - Stored in GitHub repository allegroai/clearml-server prior to 1.13.0.

    Allegro.AI allegroai/clearml-server