← Vulnerability feed

Vulnerability record · CVE-2021-43775 · published 23 November 2021

CVE-2021-43775: Aimstack aim path traversal vulnerability

Aimstack · Aim

Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files. The vulnerability issue is resolved in Aim v3.1.0.

8.6 CVSS 3.1 High EPSS 1.9% · top 21.1% CWE-22 · Path traversal
8.6CVSS 3.1 base score, v2 5.0
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a path traversal attack. By manipulating variables that reference files with “dot-dot-slash (../)” sequences and its variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on file system including application source code or configuration and critical system files. The vulnerability issue is resolved in Aim v3.1.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/aimhubio/aim/blob/0b99c6ca08e0ba7e7011453a2f68033e9b1d1bce/aim/web/api/views.py#L9-L16 Product
https://github.com/aimhubio/aim/issues/999 Issue TrackingThird Party Advisory
https://github.com/aimhubio/aim/pull/1003 PatchThird Party Advisory
https://github.com/aimhubio/aim/pull/1003/commits/f01266a1a479ef11d7d6c539e7dd89e9d5639738 Patch
https://github.com/aimhubio/aim/security/advisories/GHSA-8phj-f9w2-cjcc ExploitThird Party Advisory
https://github.com/aimhubio/aim/blob/0b99c6ca08e0ba7e7011453a2f68033e9b1d1bce/aim/web/api/views.py#L9-L16 Product
https://github.com/aimhubio/aim/issues/999 Issue TrackingThird Party Advisory
https://github.com/aimhubio/aim/pull/1003 PatchThird Party Advisory
https://github.com/aimhubio/aim/pull/1003/commits/f01266a1a479ef11d7d6c539e7dd89e9d5639738 Patch
https://github.com/aimhubio/aim/security/advisories/GHSA-8phj-f9w2-cjcc ExploitThird Party Advisory

Track CVE-2021-43775 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-6396Aim _backup_run path traversal allows arbitrary file overwriteAim 3.19.3 mishandles the run_hash and repo.path parameters in the _backup_run function, letting a remote attacker build arbitrary file paths and wri…EPSS 53%analysed9.8CVE-2024-2195Aimstack aim code injection vulnerabilityA critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim project, specifically within the `/api/runs/search/run/` endp…EPSS 1.8%9.6CVE-2024-7760Aimstack aim cross-site request forgery vulnerabilityaimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly per…EPSS 0.52%9.1CVE-2024-8769Aimstack aim path traversal vulnerabilityA vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path…EPSS 0.91%9.1CVE-2024-6829Aimstack aim vulnerabilityA vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit the `tarfile.extractall()` function to extract the contents of a malicio…EPSS 0.87%8.8CVE-2025-51464Aimstack aim cross-site scripting vulnerabilityCross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious Python co…EPSS 0.61%8.8CVE-2024-2196Aimstack aim cross-site request forgery vulnerabilityaimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to perform actions such as deleting runs, updating data, and stea…EPSS 0.59%8.1CVE-2024-8238Aimstack aim vulnerabilityIn version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() function from RestrictedPython. This vers…EPSS 0.77%

Source: NIST National Vulnerability Database (record CVE-2021-43775), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.