N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-7c78-rm87-5673

GHSA-7c78-rm87-5673: MS SWIFT WEB-UI RCE Vulnerability

I. Detailed Description:

Install ms-swift
```
pip install ms-swift -U
```
Start web-ui
```
swift web-ui --lang en
```
After startup, access through browser at http://localhost:7860/ to see the launched fine-tuning framework program
Fill in necessary parameters In the LLM Training interface, fill in required parameters including Model id, Dataset Code. The --output_dir can be filled arbitrarily as it will be modified later through packet capture
Click Begin to start training. Capture packets and modify the parameter corresponding to --output_dir

You can see the concatenated command being executed in the terminal where web-ui was started
Wait for the program to run (testing shows it requires at least 5 minutes), and you can observe the effect of command execution creating files

II. Vulnerability Proof:

/tmp/xxx'; touch /tmp/inject_success_1; #

III. Fix Solution:

The swift.ui.llm_train.llm_train.LLMTrain#train() method should not directly concatenate parameters with commands after receiving commands from the frontend
The swift.ui.llm_train.llm_train.LLMTrain#train_local() method should not use os.system for execution, but should be changed to subprocess.run([cmd, arg1, arg2...]) format

Author

Discovered by: TencentAISec
Contact: security@tencent.com

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-7c78-rm87-5673

GHSA-7c78-rm87-5673:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
ms-swift	pip	<= 3.6.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic command injection issue within the ms-swift web UI. The root cause is the practice of building shell command strings by directly concatenating user-provided input without proper sanitization or escaping. The advisory specifically highlights the LLMTrain.train and LLMTrain.train_local methods, where user-controlled parameters like --output_dir are appended to a command string.

The analysis of the patch confirms this. Across multiple UI components (llm_train, llm_eval, llm_export, llm_infer, etc.), the code was changed to stop building raw command strings. Instead of concatenating parameters, the fix implements building a list of command arguments. This list is then safely passed to subprocess.Popen or subprocess.run, which, when not using shell=True, treats each item in the list as a distinct argument and does not interpret shell metacharacters, thus preventing command injection.

The vulnerable functions are primarily the methods responsible for executing the commands (e.g., train_local, eval_model), which used insecure methods like os.system or subprocess.Popen(shell=True). The methods that construct these commands (e.g., train, eval) are also culpable as they are where the malicious payload is incorporated into the command. The vulnerability is widespread across the UI, affecting training, evaluation, exporting, and inference functionalities.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.