writeups.xyz / Hacking AI: System and Cloud Takeover via MLflow Exploit

Submitter : c2a

Date: 25 March 2023

Bounty : undisclosed

Vulnerabilities :

• LFI
• RFI
• RCE

Programs :

• MLflow

Authors :

• Dan McInerney (@DanHMcInerney)

Link :
https://protectai.com/blog/hacking-ai-system-takeover-exploit-in-mlflow