CVE-2024-24595: Clear Clearml

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

Affected products

• Clear Clearml: affected versions not specified

Published 2024-02-05. Last modified 2026-06-17.