Lunary IDOR and SAML Access Control (CVE-2024-7474, CVE-2024-7475)
Date: 2024-10
Affected: Lunary
Attack vector: tool-abuse
Category: research
Severity: Critical

Protect AI/huntr disclosed two critical vulnerabilities (CVSS 9.1) in Lunary LLMOps platform: IDOR (CVE-2024-7474) and improper SAML access control (CVE-2024-7475).


Mitigations:

Architectural layers (MAESTRO):