Skip to content
OpenAdvisories

Vendor

polyaxon

4 known vulnerabilities.

Products

polyaxon/polyaxon 3 polyaxon 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-91925

    Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

    Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespac…

    polyaxon polyaxon
  • High 7.5
    CVE-2024-9362 Scanner template

    Directory Traversal in polyaxon/polyaxon

    An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive…

    polyaxon polyaxon/polyaxon
  • High 7.5
    CVE-2024-9363

    Unauthorized File Deletion in polyaxon/polyaxon

    An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such as `polyaxon.sock`, c…

    polyaxon polyaxon/polyaxon