Junglewise Threat Intelligence

CVE-2024-24595: PYSEC-2026-1257 - Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

CVE-2024-24595 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: clearml (PyPI). Vendors: PyPI.

Executive brief

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

Affected products

PyPI clearml

Related threats

PYSEC-2026-1255 - clearml is vulnerable to Path Traversal through its `safe_extract` function
PYSEC-2026-1258 - Allegro AI ClearML path traversal vulnerability
PYSEC-2026-1256 - Allegro AI ClearML vulnerable to deserialization of untrusted data