THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-27770 — UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain and a valid aut

[NVD] CVE-2025-27770 — UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain and a valid aut

lownvdPublished 2026-08-17

CVE-2025-27770 CVSS: None Published: 2026-08-17T16:16:46.447

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain and a valid authentication method may be able to execute arbitrary code

MITRE ATT&CK techniques

Generative AIAML.T0016.002

Indicators of compromise

CVE-2025-27770cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-27770