The host contains Hierarchical Data Format HDF5 (.h5) files. HDF5 files are often used as Machine Learning Model Files.

Note that this plugin only detects files in commonly used installation directories or a user specified search path.
 - Enable Thorough Tests to allow more time to scan.
 - Enable Report Verbosity to show more than 250 files in plugin output.

The host contains HuggingFace repositories, which may contain AI/LLM models.

A Horovod Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A scikit-learn Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A NumPy Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Keras Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote host contains a torchserve version that is prior to  2.2.2. It is, therefore, affected by a remote code execution vulnerability.  A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution (RCE). The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC (Remote Procedure Call) operations. This oversight permits attackers to execute arbitrary commands by leveraging built-in Python functions such as eval during multi-cpu RPC communication. The vulnerability arises from the lack of restriction on function calls when a worker node serializes and sends a PythonUDF (User Defined Function) to the master node, which then deserializes and executes the function without validation. This flaw can be exploited to compromise master nodes initiating distributed training, potentially leading to the theft of sensitive AI-related data.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A PyTorch Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

Microsoft Recall, an AI helper utility, is installed on the remote Windows host.

An Intel Neural Compressor library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The version of Intel Neural Compressor installed on the remote host is prior to 2.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin utilizes various Nessus detection methods and reports software identified by to Nessus and known to utilize "Artificial Intelligence" (AI) and Large Language Model (LLM) technology.

Note that this plugin uses several detection methods. The products reported by this plugin will grow as more detections and methods are added.

A TensorFlow Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote web server hosts ZenML web application

The remote host contains a torchserve version that is prior to 2.11.3. It is, therefore, affected by a Server Side Request Forgery vulnerability in the api/cors endpoint.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running an NextChat webapp.

The remote web server hosts H2O Flow web application

The remote web server port is a TorchServe application.

The remote host contains a torchserve version that is prior to  0.8.2. It is, therefore, affected by a Server Side Request Forgery vulnerability.  TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A remote attacker can exploit this and load the malicious model of their choice from any URL.

ID	Name	Severity
202721	Hierarchical Data Format HDF5 File Detection for Linux/UNIX	info
201924	HuggingFace Git Repo Detection for Linux/UNIX	info
201193	Ray Dashboard Detection	info
201192	Horovod Detection	info
201191	Scikit-learn Detection	info
201190	NumPy Detection	info
201189	Keras Detection	info
200978	PyTorch < 2.2.2 RCE	critical
200977	PyTorch Detection	info
200452	Windows Recall Enabled	info
198067	Intel Neural Compressor Library Detection	info
198066	Intel Neural Compressor < 2.5.0 Multiple Vulnerabilities	critical
196906	AI/LLM Software Report	info
195192	TensorFlow Detection	info
194954	ZenML Detection	info
194720	NextChat < 2.11.3 SSRF	critical
194719	NextChat / ChatGPT Next Web Detection	info
194478	H2O Flow Detection	info
193561	Ray Dashboard Job RCE (CVE-2023-48022)	critical
193560	Ray Dashboard Detection	info
184082	PyTorch TorchServe API detection	info
184080	PyTorch TorchServe SSRF (CVE-2023-43654)	critical

Detections

Analytics

Artificial Intelligence Family for Nessus

info

info

info

info

info

info

info

critical

info

info

info

critical

info

info

info

critical

info

info

critical

info

info

critical