polyaxon/polyaxon vulnerabilities

2 known vulnerabilities in polyaxon/polyaxon from Polyaxon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  polyaxon/polyaxon: Relative Path Traversal

  CVE-2024-9363Mar 20, 2025PolyaxonEPSS 1.06%

  An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to denial of service by terminating critical containers. An attacker can delete important files within the containers, such as `polyaxon.sock`, ca

• 7.5 High severity

  polyaxon/polyaxon: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-9362Mar 20, 2025PolyaxonEPSS 4.4%

  An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerability allows an attacker to retrieve directory information and file contents from the server without proper authorization, leading to sensitive