Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Researchers found security issues in 15 different open-source machine learning projects, both on the server and client sides, including Weave, ZenML, Deep Lake, Vanna.AI, and Mage AI, that could be exploited to gain unauthorized access or control.