Critical remote unauthenticated system/cloud takeover in major AI tool (protectai.com) 7 points by DanMcInerney 3y ago ↗ HN
[–] DanMcInerney 3y ago ↗ Pretty brutal. Took me about 3 days to find. I suspect there's more.* Unauthenticated* Remote* No user interaction* No prerequisite knowledge or environment setup* Large adoption on MLflow in AI engineering workflowsHere's the GitHub Security Advisory: https://github.com/mlflow/mlflow/security/advisories/GHSA-xg...
2 comments
[ 3.9 ms ] story [ 18.3 ms ] thread* Unauthenticated
* Remote
* No user interaction
* No prerequisite knowledge or environment setup
* Large adoption on MLflow in AI engineering workflows
Here's the GitHub Security Advisory: https://github.com/mlflow/mlflow/security/advisories/GHSA-xg...