CVE-2025-27771
Received Received - Intake

Remote Code Execution in UpTrain via API Parameters

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: GitHub, Inc.

Description
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain and a valid authentication method may be able to execute arbitrary code in the context of the host running UpTrain, which in most cases will be the docker container as suggested by the documentation. As of time of publication, no known patch is available.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2025-27771
EUVD
EUVD-2025-210735

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
uptrain uptrain to 0.7.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-27771 is a remote code execution vulnerability in UpTrain versions 0.7.1 and earlier. It exists in the /add_prompts endpoint due to improper handling of user input in the 'checks' and 'metadata' parameters. The application uses Python's eval() function to process this input, allowing attackers with valid authentication to execute arbitrary code on the host system, typically within a Docker container.

Detection Guidance

Check if UpTrain version 0.7.1 or earlier is running on your system. Inspect network traffic for requests to /add_prompts or /new_run endpoints with suspicious 'checks' or 'metadata' parameters containing Python code or eval-like payloads.

Impact Analysis

This vulnerability allows authenticated users to execute arbitrary code on the system running UpTrain. Since UpTrain typically runs in a Docker container, attackers could gain control over the container environment. This could lead to data theft, system compromise, or disruption of AI application operations.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, which may violate GDPR's data protection requirements and HIPAA's security rules. Organizations using affected UpTrain versions risk non-compliance due to potential exposure of sensitive data.

Mitigation Strategies

Immediately restrict access to UpTrain endpoints. Disable or block the /add_prompts and /new_run endpoints if possible. Update to a patched version if available. If no patch exists, consider isolating the UpTrain instance in a restricted network segment.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-27771. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart