Описание
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
A flaw was found in Streamlit, within its Palette Handler component. This vulnerability stems from the use of a weak hashing algorithm. A local attacker could exploit this flaw, though it requires a high level of technical complexity. Successful exploitation may lead to a low impact on the integrity and availability of the affected system.
Отчет
Red Hat rates this vulnerability as Low impact with a CVSS score of 3.6, lower than NIST's 4.7. Red Hat products that ship Streamlit are limited to RHEL AI bootc containers and RHOAI's NeMo Guardrails server, where the caching functions are used for internal model serving rather than processing user-uploaded datasets, making the attack scenario unlikely. Red Hat scores integrity as Low rather than High because the hash collision requires preserving values at sampled positions, which constrains what the attacker can change. The attacker controls the non-sampled rows but cannot freely modify all cached data. Availability is Low because poisoned cache entries cause incorrect results for the cache lifetime without affecting the application itself.
Меры по смягчению последствий
If your application uses @st.cache_data or @st.cache_resource with large datasets from untrusted sources, validate the data before it reaches the caching layer. For DataFrames exceeding the 50,000-row sampling threshold, comparing a hash of the full dataset against the cached version before returning results can catch collisions that the built-in sampler misses. Reducing the cache TTL also limits the window during which a poisoned entry would be served to other users.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gaudi-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/disk-image-cuda-rhel9 | Fix deferred | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-trustyai-nemo-guardrails-server-rhel9 | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
3.6 Low
CVSS3
Связанные уязвимости
A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission
EPSS
3.6 Low
CVSS3