THREAT OPS › Threat News › [NVD] CVE-2025-27621 — UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backend also has an open C
[NVD] CVE-2025-27621 — UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backend also has an open C
CVE-2025-27621 CVSS: None Published: 2026-08-17T16:16:46.290
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backend also has an open CORS policy. Using these two primitives, any website can m
MITRE ATT&CK techniques
- Generative AIAML.T0016.002
Indicators of compromise
- CVE-2025-27621cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-27621