Command Injection Vulnerability in PaddlePaddle Framework

CVE-2024-0815

What is CVE-2024-0815?

A command injection vulnerability has been identified in the PaddlePaddle framework, specifically within the 'paddle.utils.download._wget_download' function. This flaw enables attackers to exploit the system by bypassing security filters, allowing unauthorized commands to be executed. As a result, users of PaddlePaddle version 2.6.0 are at risk. Organizations utilizing this version should take immediate action to mitigate potential security threats by implementing the latest patches and reviewing their security configurations.

References