Описание
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the unsafe eval() function to parse string values provided via the --clip_values and --input_shape command-line arguments. This allows an attacker to inject arbitrary Python code into these arguments, which will be executed when eval() is called. The vulnerability can be exploited remotely if an attacker can control these arguments (e.g., through pipeline configuration or automated scripts), leading to arbitrary code execution on the system running the ART evaluation.
A flaw was found in Adversarial Robustness Toolbox (ART). This command-line argument injection vulnerability exists in its Kubeflow component due to the unsafe use of the eval() function, which parses string values from --clip_values and --input_shape arguments. A remote attacker can exploit this by injecting arbitrary Python code into these arguments, leading to arbitrary code execution on the system running the ART evaluation.
Отчет
This is rated as an Important vulnerability. The Adversarial Robustness Toolbox (ART) in Red Hat OpenShift AI is susceptible to arbitrary code execution due to unsafe handling of command-line arguments. An attacker capable of controlling the --clip_values or --input_shape arguments can inject and execute arbitrary Python code, posing a significant risk in affected deployments.
Меры по смягчению последствий
To mitigate this vulnerability, ensure that only trusted and authorized users have permissions to create, modify, or deploy Kubeflow pipelines and configurations within Red Hat OpenShift AI. Restricting access to the environment where the Adversarial Robustness Toolbox (ART) evaluation scripts are executed can prevent attackers from controlling the vulnerable command-line arguments. If a service is restarted or reloaded, these access controls will persist.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-agent-rhel9 | Affected | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-controller-rhel9 | Affected | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-router-rhel9 | Affected | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-storage-initializer-rhel9 | Affected |
Показывать по
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the unsafe eval() function to parse string values provided via the --clip_values and --input_shape command-line arguments. This allows an attacker to inject arbitrary Python code into these arguments, which will be executed when eval() is called. The vulnerability can be exploited remotely if an attacker can control these arguments (e.g., through pipeline configuration or automated scripts), leading to arbitrary code execution on the system running the ART evaluation.
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the unsafe eval() function to parse string values provided via the --clip_values and --input_shape command-line arguments. This allows an attacker to inject arbitrary Python code into these arguments, which will be executed when eval() is called. The vulnerability can be exploited remotely if an attacker can control these arguments (e.g., through pipeline configuration or automated scripts), leading to arbitrary code execution on the system running the ART evaluation.
EPSS
8.8 High
CVSS3