CVE-2024-0960 | flink-extended ai-flow 0.3.1 workflow_command.py cloudpickle.loads deserialization

A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file ai_flowclicommandsworkflow_command.py. The manipulation leads to deserialization.

This vulnerability is known as CVE-2024-0960. The attack can be launched remotely. Furthermore, there is an exploit available.