CyberRota Analysis
AI-GeneratedPolyaxon versions up to 2.16.4 are vulnerable due to the use of an unsandboxed Jinja2 environment, enabling authenticated users to execute arbitrary code through specially crafted payloads in various operation specification fields. This vulnerability allows attackers to run operating system commands within the scheduler process, potentially exposing sensitive information such as database credentials and service tokens. Organizations using Polyaxon should prioritize patching this vulnerability to mitigate the risk of unauthorized code execution and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencies fields to execute operating system commands in the scheduler process context, exposing database credentials and service tokens.