Database/Control plane, storage & DevOps
Backpropagate (single-GPU LLM fine-tuning library) - Reflex web UI: The optional web UI exposes a training control
Impact
The optional web UI exposes a training control surface without authentication, scored 9.3. On a GPU box this means an unauthenticated caller drives training jobs on your hardware - the practical outcomes are GPU theft for someone else's workload, poisoning of a fine-tune in progress, and read access to whatever the training process can see.
Who can reach it
Network, unauthenticated. Anyone who can reach the UI port. Fine-tuning UIs get bound to 0.0.0.0 during experimentation far more often than anyone admits.
What to do
Upgrade past 1.1.1, or disable the Reflex web UI entirely if you do not use it. Cost: restart the service. The standing control is a network policy that stops research workloads binding tooling ports to anything but localhost.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.