Missing Authorization in Determined API Endpoints (CVE-2026-75109)

Determined AI's Determined platform (versions up to and including 0.38.1) contains a critical missing authorization vulnerability (CVE-2026-75109) within its generic task API handlers. Specifically, the endpoints responsible for killing, pausing, and unpausing tasks do not perform checks to ensure the requester is the owner of the task or has appropriate administrative permissions. An authenticated user within the environment can leverage this flaw to manipulate the execution state of tasks belonging to other users. This vulnerability is documented as CWE-862 and poses a significant risk to organizations utilizing Determined for shared compute and machine learning model training workloads, as it enables unauthorized service disruption and potential operational sabotage.

Impact

The vulnerability allows for the unauthorized disruption of active workloads within the Determined platform. If exploited, an authenticated attacker can terminate, pause, or unpause arbitrary tasks, directly impacting production model training, research workflows, and resource allocation. This can lead to significant delays in data science operations, loss of compute-intensive task progress, and degradation of platform availability.

Recommendation

• Upgrade Determined to version 0.38.2 or later immediately to apply the required authorization checks in the API handlers.
• Review web server or API gateway access logs for abnormal volumes of requests to the generic task API endpoints (typically mapped to kill, pause, or unpause operations) originating from users who should not have administrative control over those task IDs.
• Restrict platform access to trusted users and enforce the principle of least privilege for API usage until the patch is applied.