CVE-2024-24590
Allegro AI ClearML vulnerable to deserialization of untrusted data
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
CVE-2024-24590- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
EUVDEUVD-2024-0620
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
EUVD-2024-0620- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cpcw-9h9m-wqw9
Allegro AI ClearML vulnerable to deserialization of untrusted data
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
GHSA-cpcw-9h9m-wqw9- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
NVD
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
CVE-2024-24590- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSV
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
CVE-2024-24590- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVGHSA-cpcw-9h9m-wqw9
Allegro AI ClearML vulnerable to deserialization of untrusted data
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
GHSA-cpcw-9h9m-wqw9- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVPYSEC-2026-1256
Allegro AI ClearML vulnerable to deserialization of untrusted data
Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.
- Record
PYSEC-2026-1256- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clearmlPyPI |
0.17.0 to 1.14.1 | None known |
clearmlPyPI |
0.17.0 to 1.14.1, plus listed versions 0.17.10.17.20.17.30.17.40.17.5 Show 45 moreShow less0.17.5rc00.17.5rc10.17.5rc20.17.5rc30.17.5rc40.17.5rc50.17.5rc60.17.6rc11.0.01.0.11.0.21.0.2rc01.0.31.0.3rc01.0.3rc11.0.41.0.4rc01.0.4rc11.0.51.0.6rc11.0.6rc21.1.01.1.11.1.21.1.2rc01.1.31.1.3rc01.1.41.1.4rc01.1.51.1.5rc01.1.5rc11.1.5rc21.1.5rc31.1.5rc41.1.5rc51.1.5rc61.1.5rc71.1.61.1.6rc01.10.01.10.0rc01.10.11.10.21.10.3 |
None known |
clearmlPyPI |
0.17.0 up to 1.14.3rc0, plus listed versions 0.17.10.17.20.17.30.17.40.17.5 Show 45 moreShow less0.17.5rc00.17.5rc10.17.5rc20.17.5rc30.17.5rc40.17.5rc50.17.5rc60.17.6rc11.0.01.0.11.0.21.0.2rc01.0.31.0.3rc01.0.3rc11.0.41.0.4rc01.0.4rc11.0.51.0.6rc11.0.6rc21.1.01.1.11.1.21.1.2rc01.1.31.1.3rc01.1.41.1.4rc01.1.51.1.5rc01.1.5rc11.1.5rc21.1.5rc31.1.5rc41.1.5rc51.1.5rc61.1.5rc71.1.61.1.6rc01.10.01.10.0rc01.10.11.10.21.10.3 |
1.14.3rc0 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | OxyDeV2/ClearML-CVE-2024-24590 | 2024-06-11 |
| PoC in GitHub | diegogarciayala/CVE-2024-24590-ClearML-RCE-CMD-POC | 2024-06-15 |
| PoC in GitHub | j3r1ch0123/CVE-2024-24590 | 2024-10-07 |
| PoC in GitHub | junnythemarksman/CVE-2024-24590 | 2024-06-20 |
| PoC in GitHub | rippsec/CVE-2024-24590-ClearML-RCE-Exploit | 2024-06-13 |
| PoC in GitHub | sviim/ClearML-CVE-2024-24590-RCE | 2024-07-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-24590 is a high vulnerability (CVSS 8.0) in Allegro.ai Clearml, published February 6, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.47%, the 84th percentile. Fixed in clearml 1.14.3rc0.
References
hiddenlayer.com/research/not-so-clear-how-mlops-solutions-can-muddy-the-waters-of-your-supply-chain
nvd.nist.gov/vuln/detail/CVE-2024-24590
github.com/advisories/GHSA-cpcw-9h9m-wqw9
pypi.org/project/clearml
Left out here: 191 versions. The JSON record has them.