writeups.xyz / From MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms

Submitter : c2a

Date: 20 August 2024

Bounty : undisclosed

Vulnerabilities :

• AI
• RCE
• XSS
• Missing Authentication
• Container Escape
• Malicious AI Model
• Malicious Datasets

Programs :

• Jupyter
• Hugging Face
• MLflow
• KServe
• Seldon

Authors :

• Ori Hollander
• Shachar Menashe
• Natan Nehorai
• Uriya Yavnieli

Link :
https://jfrog.com/blog/from-mlops-to-mloops-exposing-the-attack-surface-of-machine-learning-platforms/