polyaxon

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

polyaxon records in CISA KEV

No polyaxon vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-62061 CVE-2026-91925 · GHSA-w7qq-x87w-72qx

Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

HIGH 73

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00775 Published 2026-09-15 No fix listed CWE-1336

TI-2024-08687 CVE-2024-9363 · GHSA-m47g-ghr5-3734

Unauthorized File Deletion in polyaxon/polyaxon

HIGH 72

An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01065 Published 2025-03-20 No fix listed CWE-23

TI-2024-08686 CVE-2024-9362 · GHSA-q88j-ff64-2m3q

Directory Traversal in polyaxon/polyaxon

HIGH 72

An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04396 Published 2025-03-20 No fix listed CWE-22

TI-2024-08689 CVE-2024-9365 · GHSA-wmc2-c6g2-9mf2

Cross-Site Request Forgery (CSRF) in polyaxon/polyaxon

MEDIUM 62

A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00249 Published 2025-03-20 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0