The vulnerability affects the /create_project endpoint of UpTrain, allowing an authenticated user to supply crafted ‘checks’ and ‘metadata’ parameters that trigger execution of arbitrary code in the host process. The flaw is rooted in CWE-74, where unsafe evaluation of user-supplied expressions leads to uncontrolled code execution. If exploited, an attacker could gain full control of the container or host running the service, compromising confidentiality, integrity, and availability of all data managed by UpTrain.

UpTrain version 0.7.1 and earlier, shipped under the uptrain‑ai:uptrain open‑source codebase. These releases are used by organizations running the platform in Docker containers as documented.

The CVSS score of 7.4 indicates high severity, and though the EPSS score is not available, the lack of a patch and the fact that any authenticated user can target the endpoint increase the likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, but its impact is significant for environments where the container host is reachable by potentially untrusted users. Attackers would need valid credentials, making internal or compromised accounts a primary vector.