A Keras Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote host contains a torchserve version that is prior to  2.2.2. It is, therefore, affected by a remote code execution vulnerability.  A vulnerability in the PyTorch's torch.distributed.rpc framework, specifically in versions prior to 2.2.2, allows for remote code execution (RCE). The framework, which is used in distributed training scenarios, does not properly verify the functions being called during RPC (Remote Procedure Call) operations. This oversight permits attackers to execute arbitrary commands by leveraging built-in Python functions such as eval during multi-cpu RPC communication. The vulnerability arises from the lack of restriction on function calls when a worker node serializes and sends a PythonUDF (User Defined Function) to the master node, which then deserializes and executes the function without validation. This flaw can be exploited to compromise master nodes initiating distributed training, potentially leading to the theft of sensitive AI-related data.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A PyTorch Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

Microsoft Recall, an AI helper utility, is installed on the remote Windows host.

The version of Ollama installed on the remote host is prior to 0.1.29. It is, therefore, affected by a DNS rebinding vulnerability. Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Ollama is installed on the remote macOS host.

An Intel Neural Compressor library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The version of Intel Neural Compressor installed on the remote host is prior to 2.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin utilizes various Nessus detection methods and reports software identified by to Nessus and known to utilize "Artificial Intelligence" (AI) and Large Language Model (LLM) technology.

Note that this plugin uses several detection methods. The products reported by this plugin will grow as more detections and methods are added.

A TensorFlow Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The remote web server hosts ZenML web application

The remote host contains a torchserve version that is prior to 2.11.3. It is, therefore, affected by a Server Side Request Forgery vulnerability in the api/cors endpoint.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running an NextChat webapp.

The remote web server hosts H2O Flow web application

The remote host contains a ray dashboard which is purposely lacking authentication features.  As such, it is therefore, affected by a remote code execution vulnerability in the jobs api endpoint.

The remote web server port is a TorchServe application.

The remote host contains a torchserve version that is prior to  0.8.2. It is, therefore, affected by a Server Side Request Forgery vulnerability.  TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A remote attacker can exploit this and load the malicious model of their choice from any URL.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host contains a torchserve version that is prior to  0.8.2. It is, therefore, affected by a Server Side Request Forgery vulnerability.  TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and sensitive data. This issue is present in versions 0.1.0 to 0.8.1. A remote attacker can exploit this and load the malicious model of their choice from any URL.

ID	Name	Severity
201189	Keras Detection	info
200978	PyTorch < 2.2.2 RCE	critical
200977	PyTorch Detection	info
200452	Windows Recall Enabled	info
200186	Ollama < 0.1.29 DNS Rebinding	high
200184	Ollama Installed (macOS)	info
198067	Intel Neural Compressor Library Detection	info
198066	Intel Neural Compressor < 2.5.0 Multiple Vulnerabilities	critical
196906	AI/LLM Software Report	info
195192	TensorFlow Detection	info
194954	ZenML Detection	info
194720	NextChat < 2.11.3 SSRF	critical
194719	NextChat / ChatGPT Next Web Detection	info
194478	H2O Flow Detection	info
193561	Ray Dashboard Job RCE (CVE-2023-48022)	critical
193560	Ray Dashboard Detection	info
184082	PyTorch TorchServe API detection	info
184081	PyTorch TorchServe < 0.8.2 SSRF	critical
184080	PyTorch TorchServe SSRF (CVE-2023-43654)	critical

Detections

Analytics

Artificial Intelligence Family for Nessus

info

critical

info

info

high

info

info

critical

info

info

info

critical

info

info

critical

info

info

critical

critical