Skip to content
OpenAdvisories

Vendor

uptrain-ai

4 known vulnerabilities.

Products

uptrain 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.4
    CVE-2025-27772

    Uptrain vulnerable to remote code execution via `/new_run` endpoint

    UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain a…

    uptrain-ai uptrain
  • High 7.4
    CVE-2025-27771

    Uptrain vulnerable to remote code execution via `/add_prompts` endpoint

    UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTra…

    uptrain-ai uptrain
  • High 7.4
    CVE-2025-27770

    UpTrain vulnerable to Remote code execution at `/create_project`

    UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to Up…

    uptrain-ai uptrain
  • High 7.7
    CVE-2025-27621

    UpTrain has a Constant Default API Key

    UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backe…

    uptrain-ai uptrain