Database/AI/ML frameworks & serving
ClearML client SDK: Deserialization of untrusted data
Impact
Deserialization of untrusted data — a malicious uploaded artifact executes code on the consuming host
Who can reach it
Customer-supplied artifact pulled by another user's ClearML job
What to do
Upgrade past 1.14.2. Cross-tenant if a shared ClearML server serves multiple teams
Fleet impact
How widespread
Common - ClearML is a widely used MLOps/experiment platform beside GPU clusters; affects SDK 0.17.0-1.14.2
Cost to remediate
**Image rebuild** of every image containing the ClearML SDK, plus revocation of every artifact in the store
Why it hits the whole fleet
Artifact.get() pickle-deserializes a maliciously uploaded artifact, so one poisoned artifact runs code on every user or job that reads it - a supply-chain fan-out inside the platform, with 10+ public PoCs
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.