Advisories · Technology
uptrain.
Every CVE that names uptrain among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Uptrain vulnerable to remote code execution via `/new_run` endpoint
- uptrain
- Other injection
- CVSS 7.4 High
Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
- uptrain
- Other injection
- CVSS 7.4 High
UpTrain vulnerable to Remote code execution at `/create_project`
- uptrain
- Other injection
- CVSS 7.7 High
UpTrain has a Constant Default API Key
- uptrain
- Authentication bypass