https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:40:33 +0000 https://vulnerability.circl.lu/vuln/cve-2026-85663 <p><strong>Affected:</strong> aimhubio aim</p> <p>Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs.</p> <p><strong>Affected:</strong> aimhubio aim</p> <p>Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs.</p> https://vulnerability.circl.lu/vuln/cve-2026-85663