19 matches found
Dop2Mop
Dop2Mop BloodHound를 위한 개념 증명 OpenGraph 수집기로, DevOps에서 MLOps 인프라로 이어지는 공격 경로를 매핑합니다. Brett Hawkins@h4wkst3r의 Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure를 기반으로 합니다. 목차 감사의 말 개요 지원 플랫폼 매핑된 신뢰 경계 설치 선택적 종속성 빠른 시작 데모 데이터 생성 BloodHound로 수집 설정 설정 파일 자격 증명 검증 CLI 참조 명령 개요 전역 ...
CVE-2026-7213
A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...
CVE-2026-7213
A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...
EUVD-2026-25966
A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...
CVE-2026-7213 ef10007 MLOps_MCP save_file Tool fastmcp_server.py path traversal
A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...
CVE-2026-7213
A vulnerability was detected in ef10007 MLOpsMCP 1.0.0. This impacts an unknown function of the file fastmcpserver.py of the component savefile Tool. The manipulation of the argument filename/destination results in path traversal. The attack may be performed from remote. The exploit is now public...
CVE-2026-7213
CVE-2026-7213 affects ef10007 MLOps_MCP 1.0.0, specifically the save_file Tool’s fastmcp_server.py. The issue is a path traversal vulnerability triggered by manipulating the filename/destination argument. It can be exploited remotely; public exploit is available. The project was informed via issu...
PT-2026-35586
Name of the Vulnerable Software and Affected Versions ef10007 MLOps MCP version 1.0.0 Description A path traversal issue exists in the save file Tool within the fastmcp server.py file. A remote attacker can manipulate the filename/destination argument to access or overwrite files outside the...
Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research Challenges
The rapid adoption of machine learning ML technologies has driven organizations across diverse sectors to seek efficient and reliable methods to accelerate model development-to-deployment. Machine Learning Operations MLOps has emerged as an integrative approach addressing these requirements by...
Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform
Cybersecurity researchers have disclosed two security flaws in Google's Vertex machine learning ML platform that, if successfully exploited, could allow malicious actors to escalate privileges and exfiltrate models from the cloud. "By exploiting custom job permissions, we were able to escalate ou...
Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms
Cybersecurity researchers are warning about the security risks in the machine learning ML software supply chain following the discovery of more than 20 vulnerabilities that could be exploited to target MLOps platforms. These vulnerabilities, which are described as inherent- and implementation-bas...
Malicious code in jd-mlops (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27e0c1b0bb778a762b23a541daa571391b073db56f64e90af5a403dffe5bbff3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in szn-search-mlops-common (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 062d7a1b66afdb645fe65b5cc0fbd6d24390d777892168de0b2f73c5e63f2320 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-3005 Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Exploit for Deserialization of Untrusted Data in Clear Clearml
ClearML Exploit Script This repository contains a Python expl...
ZenML Directory Traversal Vulnerability
ZenML is an extensible open source MLOps framework for creating portable, production-ready machine learning pipelines. A directory traversal vulnerability exists in ZenML version 0.55.4, which stems from a lack of validity checking of a program's paths when processing directory requests, and can ...
ZenML Security Vulnerability
ZenML is an extensible open source MLOps framework for creating portable, production-ready machine learning pipelines. A security vulnerability exists in ZenML version v0.55.4, which stems from an arbitrary file upload vulnerability contained in the load function in...
MLOps Security Best practices
MLOps provides a systematic approach to evaluating and monitoring ML models. Discover the various security concerns associated with MLOps and learn the best practices for using it securely...