Authentication Bypass in Aim Remote Tracking Server

The Aim remote tracking server, specifically version 3.29.1, is affected by an authentication bypass vulnerability. The server fails to validate client requests and improperly dispatches arbitrary methods using the getattr function without an enforced allowlist. This flaw allows unauthenticated remote attackers to register new clients, instantiate Repo resources, and invoke unauthorized methods directly against the tracking server. Successful exploitation allows an attacker to manipulate sensitive experiment data, including reading private experiment logs or deleting recorded execution runs, potentially resulting in data loss or unauthorized exfiltration of model development telemetry. Defenders should prioritize restricting access to the Aim tracking server interface and monitoring for unauthorized API calls.

Impact

Successful exploitation of CVE-2026-85663 allows unauthenticated remote actors to gain control over the tracking server's resources. This can lead to the complete loss of experiment integrity, the unauthorized deletion of training runs, and the leakage of metadata related to machine learning projects.

Recommendation

• Restrict network access to the Aim tracking server instance to authorized internal networks only.
• Monitor web logs for unexpected POST requests directed at the Aim tracking server API endpoints that do not originate from known, authorized client IP addresses.
• Upgrade to a version of Aim that enforces server-side authentication and request validation once the vendor releases a patch.