Uptrain vulnerable to remote code execution via `/add_prompts` endpoint
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain and a valid authentication method may be able to execute arbitrary code in the context of the host running UpTrain, which in most cases will be the docker container as suggested by the documentation. As of time of publication, no known patch is available.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| uptrain-ai | uptrain | up to 0.7.1 | — | No fix listed | CNA |
- uptrain Vendoruptrain-ai Affected up to 0.7.1 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-27771
References
More uptrain-ai vulnerabilities
- TI-2025-20550 UpTrain vulnerable to Remote code execution at `/create_project` CVSS 4.0HIGH 7.4
- TI-2025-20427 UpTrain has a Constant Default API Key CVSS 4.0HIGH 7.7
- TI-2025-20552 Uptrain vulnerable to remote code execution via `/new_run` endpoint CVSS 4.0HIGH 7.4
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences