CVE-2023-41891

Summary

CVE-2023-41891 is a SQL vulnerability affecting FlyteAdmin, the control plane for Flyte used for managing entities and administering workflow executions. Malicious users with access to the FlyteAdmin installation, often behind a VPN or through authentication, can exploit this vulnerability by sending custom SQL statements as list filters through REST requests. The flaw, present before version 1.1.124, can potentially expose sensitive data. Version 1.1.124 includes a patch to address this issue and mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.