pentester.land· Aug 20, 2024· by Ori Hollander, Shachar Menashe, Natan Nehorai, Uriya Yavnieli

From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Open Original Article ↗
Target Program: Jupyter, Hugging Face, MLflow, KServe, Seldon
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#AI#RCE#XSS#Missing authentication#Container escape#Malicious AI model#Malicious datasets