The version of llama.cpp installed on the remote host is prior to 0.2.88. It is, therefore, affected by an arbitrary write vulnerability. This vulnerability was combined with another arbitrary address read vulnerability to achieve RCE, demonstrating the significant impact of the vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A broken access control vulnerability exists in mlflow/mlflow versions before 2.12.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote web server hosts MLFlow web application

A MLflow Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A ZenML Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Seaborn Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Tensorboard Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A H2O Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A OpenAI Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A LLama.cpp Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A LangChain Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

OpenAI ChatGPT App is installed on the remote macOS or Mac OS X host.

The version of Keras installed on the remote host is prior to 2.13. It is, therefore, affected by an arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) which allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The host contains Hierarchical Data Format HDF5 (.h5) files. HDF5 files are often used as Machine Learning Model Files.

Note that this plugin only detects files in commonly used installation directories or a user specified search path.
 - Enable Thorough Tests to allow more time to scan.
 - Enable Report Verbosity to show more than 250 files in plugin output.

The host contains HuggingFace repositories, which may contain AI/LLM models.

A Horovod Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A scikit-learn Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A NumPy Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Keras Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote host contains a torchserve version that is prior to  2.2.2. It is, therefore, affected by a remote code execution vulnerability.  A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution (RCE). The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC (Remote Procedure Call) operations. This oversight permits attackers to execute arbitrary commands by leveraging built-in Python functions such as eval during multi-cpu RPC communication. The vulnerability arises from the lack of restriction on function calls when a worker node serializes and sends a PythonUDF (User Defined Function) to the master node, which then deserializes and executes the function without validation. This flaw can be exploited to compromise master nodes initiating distributed training, potentially leading to the theft of sensitive AI-related data.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A PyTorch Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

Microsoft Recall, an AI helper utility, is installed on the remote Windows host.

An Intel Neural Compressor library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The version of Intel Neural Compressor installed on the remote host is prior to 2.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin utilizes various Nessus detection methods and reports software identified by to Nessus and known to utilize "Artificial Intelligence" (AI) and Large Language Model (LLM) technology.

Note that this plugin uses several detection methods. The products reported by this plugin will grow as more detections and methods are added.

A TensorFlow Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote web server hosts ZenML web application

The remote host contains a torchserve version that is prior to 2.11.3. It is, therefore, affected by a Server Side Request Forgery vulnerability in the api/cors endpoint.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running an NextChat webapp.

The remote web server hosts H2O Flow web application

The remote host contains a ray dashboard which is purposely lacking authentication features.  As such, it is therefore, affected by a remote code execution vulnerability in the jobs api endpoint.

The remote web server port is a TorchServe application.

The remote host contains a torchserve version that is prior to  0.8.2. It is, therefore, affected by a Server Side Request Forgery vulnerability.  TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A remote attacker can exploit this and load the malicious model of their choice from any URL.

ID	Name	Severity
207350	LLama cpp python binding < 0.2.88 Arbitrary Write Vulnerability	critical
207347	MLFlow < 2.12.1 File Deletion	medium
207344	MLflow Registry Enumeration	info
206881	MLflow Detection	info
206880	MLflow Detection	info
206027	ZenML Detection	info
205590	Seaborn Detection	info
205589	Tensorboard Detection	info
205587	H2O Detection	info
205586	OpenAi Detection	info
205585	LLama.cpp Python Bindings Detection	info
205584	LangChain Detection	info
205382	OpenAI ChatGPT App Installed (macOS)	info
205011	Keras < 2.13 Arbitrary Code Injection	critical
202721	Hierarchical Data Format HDF5 File Detection for Linux/UNIX	info
201924	HuggingFace Git Repo Detection for Linux/UNIX	info
201193	Ray Dashboard Detection	info
201192	Horovod Detection	info
201191	Scikit-learn Detection	info
201190	NumPy Detection	info
201189	Keras Detection	info
200978	PyTorch < 2.2.2 RCE	critical
200977	PyTorch Detection	info
200452	Windows Recall Enabled	info
198067	Intel Neural Compressor Library Detection	info
198066	Intel Neural Compressor < 2.5.0 Multiple Vulnerabilities	critical
196906	AI/LLM Software Report	info
195192	TensorFlow Detection	info
194954	ZenML Detection	info
194720	NextChat < 2.11.3 SSRF	critical
194719	NextChat / ChatGPT Next Web Detection	info
194478	H2O Flow Detection	info
193561	Ray Dashboard Job RCE (CVE-2023-48022)	critical
193560	Ray Dashboard Detection	info
184082	PyTorch TorchServe API detection	info
184080	PyTorch TorchServe SSRF (CVE-2023-43654)	critical

Detections

Analytics

Artificial Intelligence Family for Nessus

critical

medium

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info

info

info

info

critical

info

info

info

critical

info

info

info

critical

info

info

critical

info

info

critical