Back to directory

WRITEUP #1366

Hacking AI: System and Cloud Takeover via MLflow Exploit

RCELFIRFI

by@DanHMcInerney(Dan McInerney)

Program

MLflow

Published

Mar 25, 2023

Added to HackDex

Mar 31, 2023

Read Full Writeuphttps://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow

▸ RELATED WRITEUPS

$15k RCE Through Monitoring Debug Mode

Vulnerabilities in Open Source C2 Frameworks

RCEOS command injection

[2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package

RCEDependency confusion

Attacking PowerShell CLIXML Deserialization

DeserializationInsecure deserialization

Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS

RCEArbitrary file write

Built with ❤️ by Shubham Rawat