modelscope — Vulnerabilities & Security Advisories 18

Modelscope is an AI platform providing model development and deployment services with 15 recorded CVEs. Its core use case involves creating and sharing machine learning models across various domains. Historically, common vulnerabilities include remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and insecure API endpoints. The platform has faced security incidents related to unauthorized access and data exposure, highlighting risks in its model sharing infrastructure. While offering extensive AI capabilities, its security track record indicates persistent challenges in securing user-generated content and access controls, requiring ongoing attention to mitigate potential exploitation risks.