CVE-2025-27771 uptrain-ai CVE debrief

Who should care

Defenders responsible for UpTrain instances, particularly those running version 0.7.1 or prior, should assess exposure and potential impact. This includes evaluating the sensitivity of data processed by UpTrain and implementing compensating controls to restrict access to the `/add_prompts` endpoint.

Why it matters

CVE-2025-27771 is a high-severity vulnerability in UpTrain that allows for remote code execution via the `/add_prompts` endpoint. Defenders responsible for UpTrain instances should assess exposure and potential impact, prioritize remediation efforts, and implement compensating controls to restrict access to the vulnerable endpoint. Evidence is limited to official CVE and NVD records, and vendor remediation status is unknown.

• Remote code execution may allow attackers to gain unauthorized access to sensitive data processed by UpTrain.
• The vulnerability may be exploited by users with access to UpTrain and a valid authentication method.
• Defenders should verify exposure and assess potential impact to prioritize remediation efforts.
• Remediation priority is high due to the potential for arbitrary code execution.

Technical summary

The `/add_prompts` endpoint in UpTrain version 0.7.1 and prior is vulnerable to remote code execution via the `checks` and `metadata` parameters. This allows users with access to UpTrain and a valid authentication method to execute arbitrary code in the context of the host running UpTrain. The vulnerability affects UpTrain instances, and defenders should assess exposure and potential impact based on available information from official CVE and NVD records. No known patch is available as of the time of publication, and defenders should prioritize verifying exposure and implementing compensating controls.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, as the vulnerability allows for remote code execution.

Recommended defensive actions

• Verify exposure by checking if the UpTrain instance is running version 0.7.1 or prior.
• Assess potential impact by evaluating the sensitivity of data processed by UpTrain.
• Implement compensating controls, such as restricting access to the `/add_prompts` endpoint.
• Monitor for suspicious activity on the UpTrain instance.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The vulnerability is described in the CVE record and NVD vulnerability detail page. The `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Evidence is limited to official CVE and NVD records, and vendor remediation status is unknown. Defenders should verify exposure and assess potential impact based on available information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.