Executive brief
Aim is an open-source experiment tracking platform used to log and monitor machine learning experiments. The tracking server contains a Cross-Site Request Forgery (CSRF) vulnerability due to overly permissive CORS settings that accept requests from any origin. An attacker can exploit this to perform unauthorized actions on the tracking server, potentially combined with other vulnerabilities to achieve remote code execution, denial of service, or unauthorized data access.
Technical details
The vulnerability exists in Aim's tracking server due to overly permissive Cross-Origin Resource Sharing (CORS) settings that allow cross-origin requests from all origins (CWE-352). This CSRF weakness affects all endpoints of the tracking server and can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write capabilities. The attack requires user interaction (the victim must visit an attacker-controlled page while logged into Aim) but can be executed over the network without authentication to the attacker. No specific patch information is provided in the advisory, though the issue has been tracked since version 2.0.19 through at least version 3.22.0.
Affected products
- Aim Aim 2.0.19 through 3.22.0
Timeline
- 2025-03-20: disclosed
- 2025-07-22: other: GitHub reviewed vulnerability