Uptrain-ai vulnerabilities
We track 4 vulnerabilities in Uptrain-ai products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
Latest Uptrain-ai vulnerabilities
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain an
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrai
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpT
- 7.7 High severity
uptrain: Improper Authentication
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backen