CVE-2024-24594

No known exploitation. EPSS puts it in the 48th percentile. No fix published yet.

CVSS 3.19.9Critical EPSS percentile48th0.6% chance in 30 days CISA KEVNot listedNo confirmed exploitation
No public exploit known FixNone yetNo fix or workaround published

Published 2024-02-06Updated 2024-11-21Sources: CVE.org, NVD

NVD CVE.org

What to do

No fixed build or workaround is published yet. Limit exposure and watch for a patch.

Steps

Written by AI from the record

Check whether you run ClearML and whether users can access the Debug Samples tab in its web interface.
No fixed ClearML version is currently available; ask Allegro AI or your ClearML provider for the vendor-approved remediation timeline.
Until a fix is available, restrict access to the Debug Samples tab and limit ClearML web-interface access to trusted users.

May need vendor or contractor work

Is your organisation exposed?Request an assessment to establish which checks fit your systems.

What it is

From the CVE record

A cross-site scripting (XSS) vulnerability in all versions of the web server component of Allegro AI’s ClearML platform allows a remote attacker to execute a JavaScript payload when a user views the Debug Samples tab in the web UI.

In plain language

Written by AI from the record

ClearML’s web interface has a flaw in all versions that can run harmful code in a user’s browser; treat it as an amber-priority issue if your team uses the Debug Samples page.

Stored XSS in ClearML’s web server Debug Samples tab allows a remote authenticated attacker to execute JavaScript in another user’s browser when that tab is viewed.

If you're affected

Account session theft
ClearML data exposure
Unauthorized actions as users
Workflow disruption

What is it

This is a flaw in a ClearML web page that can cause a visitor’s browser to run code supplied by an attacker. It is like allowing someone to slip instructions into a document that are carried out when another employee opens it.

Who is affected

This matters to you if you run ClearML and your staff use its web interface, especially the Debug Samples tab. An attacker must already have a ClearML login and must get another user to view the affected page.

How urgent is it

An attacker with a ClearML login can target other ClearML users through the affected page, so address this promptly as an amber-priority issue. There is no record of active exploitation or public exploit code, but no patch information is available.

What to do — in detail

Confirm the deployed ClearML version and identify every reachable ClearML web server instance.
Review whether the Debug Samples tab is enabled and which authenticated roles can create or view its content.
There are no vendor-published fixed versions or branch targets in the available findings. Track Allegro AI’s advisory or support response for a supported remediation before upgrading.
If patching is delayed, disable or restrict the Debug Samples functionality where practical, reduce ClearML access to trusted authenticated users, and place the web interface behind existing access controls.
Review ClearML access and application logs for unexpected content submitted to Debug Samples and unusual actions from user sessions. CISA has not assigned a KEV remediation due date because this CVE is not listed in KEV.

Technical context

CVE-2024-24594 is rated CVSS 9.9 Critical (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) and maps to CWE-79. The issue is cross-site scripting in the ClearML web server component: a JavaScript payload executes when a user views the Debug Samples tab. The attack vector is network-based and requires low privileges; the available description identifies the page-view trigger. CISA KEV does not list this CVE, no public exploit code is recorded, and EPSS predicts 0.6% likelihood (47th percentile) with a flat trend. Press attention is rising.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

EPSS48th

CISA KEV

Not in the catalog. CISA has not confirmed exploitation.

Public exploits

No public exploit or proof of concept found in the sources we track.

EPSS

0.6% chance of exploitation activity in the next 30 days, which ranks it in the 48th percentile of scored CVEs.

Exploit Prediction Scoring System, FIRST.org. A probability, not a confirmation.

Lifecycle

4 events over 289 days, from the signal feeds we watch.

2024-11-21Record updated
2024-02-06Publishedweakness classified, att&ck mapped

Affected products

Allegro.AIcommercialaka allegro ai
- ClearMLSaaSAI / ML / ml-framework
clearcommercialaka clear ml
- clearmlMixedAI / ML / ml-framework

Technical detail

CVSS 3.1 vector

Open in the CVSS calculator

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Scored 9.9 by NVD.

How it is reached

Attack Vector NetworkExploitable remotely over the network without any special conditions
Attack Complexity LowNo special conditions — the attack can be reliably reproduced
Privileges Required LowRequires basic user-level privileges
User Interaction NoneNo user interaction needed — fully automated exploitation

Scope

Scope ChangedThe exploit can affect other components (e.g. sandbox escape, host compromise from VM)

Impact if exploited

Confidentiality HighTotal information disclosure — all data in the component is compromised
Integrity HighTotal loss of integrity — attacker can modify any data in the component
Availability HighTotal denial of service — the component is completely unavailable