CVE-2024-0917: RCE in PaddlePaddle

The impact of CVE-2024-0917 is severe. An attacker who successfully exploits this vulnerability can execute arbitrary code with the privileges of the PaddlePaddle process. This could allow them to install malware, steal sensitive data, modify system configurations, or even gain persistent access to the affected system. Given PaddlePaddle's use in machine learning and AI applications, the potential for data exfiltration and model manipulation is significant. The RCE nature of the vulnerability means an attacker doesn't need prior authentication or access to the system beyond the ability to interact with the PaddlePaddle library.

1. Reserved2024-01-26
2. Published2024-03-07
3. Modified2025-02-13
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-0917 is to upgrade to a patched version of PaddlePaddle as soon as it becomes available. Until a patch is released, consider restricting network access to PaddlePaddle instances to minimize the attack surface. Input validation and sanitization are crucial to prevent malicious code from being injected into PaddlePaddle workflows. Monitor PaddlePaddle logs for any suspicious activity, particularly attempts to execute unusual code or access restricted resources. While a WAF may not directly prevent this RCE, it can help detect and block malicious payloads attempting to exploit the vulnerability.