UpTrain has a Constant Default API Key
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backend also has an open CORS policy. Using these two primitives, any website can make a authenticated cross-origin request to the UpTrain instance by providing the default API key in the header `uptrain-access-token`. This issue may allow arbitrary websites to perform privileged operations on the UpTrain instance, as if they were the default logged in user. As of time of publication, no known patches are available.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| uptrain-ai | uptrain | up to 0.7.1 | — | No fix listed | CNA |
- uptrain Vendoruptrain-ai Affected up to 0.7.1 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-27621
References
More uptrain-ai vulnerabilities
- TI-2025-20550 UpTrain vulnerable to Remote code execution at `/create_project` CVSS 4.0HIGH 7.4
- TI-2025-20552 Uptrain vulnerable to remote code execution via `/new_run` endpoint CVSS 4.0HIGH 7.4
- TI-2025-20551 Uptrain vulnerable to remote code execution via `/add_prompts` endpoint CVSS 4.0HIGH 7.4
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences