Polyaxon vulnerabilities
We track 3 vulnerabilities in Polyaxon products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest Polyaxon vulnerabilities
- 8.8 High severity
polyaxon: Improper Neutralization of Special Elements Used in a Template Engine
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace
- 7.5 High severity
polyaxon/polyaxon: Relative Path Traversal
An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such as `polyaxon.sock`, ca
- 7.5 High severity
polyaxon/polyaxon: Improper Limitation of a Pathname to a Restricted Directory
An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive