CVE-2025-27770 uptrain-ai CVE debrief

Who should care

Defenders responsible for UpTrain deployments, security teams, and developers using UpTrain for generative AI applications should assess exposure and apply mitigations. This includes reviewing the CVE record and NVD entry for further details, restricting access to the `/create_project` endpoint, and implementing additional security measures to monitor and limit user input. UpTrain version 0.7.1 or prior is affected, and no known patch is available as of 26

Why it matters

CVE-2025-27770 is a high-severity vulnerability in UpTrain that allows remote code execution. Defenders should assess exposure, restrict access to the `/create_project` endpoint, and implement additional security measures.

• Remote code execution is possible, allowing attackers to execute arbitrary code.
• Users with valid authentication methods can exploit the vulnerability.
• The vulnerability affects UpTrain version 0.7.1 and prior.
• No known patch is available as of the publication date.

Technical summary

The `/create_project` endpoint in UpTrain version 0.7.1 and prior is vulnerable to remote code execution via the `checks` and `metadata` parameters. This allows users with access to UpTrain and a valid authentication method to execute arbitrary code in the context of the host running UpTrain. The vulnerability has a high CVSS score of 7.4, indicating a significant risk. Defenders should assess exposure and apply mitigations to prevent exploitation. UpTrain deployments, security teams, and developers using UpTrain for generative AI applications are advised to review the CVE record and NVD entry for further details.

Defensive priority

Immediate attention is required to assess exposure and apply mitigations, as remote code execution is possible.

Recommended defensive actions

• Assess exposure by checking if UpTrain version 0.7.1 or prior is in use.
• Restrict access to the `/create_project` endpoint.
• Implement additional security measures to monitor and limit user input.
• Verify authentication methods and ensure they are properly secured.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its high CVSS score of 7.4 and the affected version of UpTrain. However, no known patch is available as of the publication date.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.