OrganizationDecember 2024
Ultralytics build cache poisoning
Template injection via a crafted branch name against a format.yml workflow using pull_request_target. Secrets including secrets._GITHUB_TOKEN were exfiltrated and the build cache poisoned to inject a cryptominer into v8.3.41 and v8.3.42. The read from researchers was that the attackers had write access but preferred extracting CI/CD secrets, then used them to poison the cache and ship malicious releases.
Permissions abused
pull_request_target template injectionsecrets._GITHUB_TOKEN
On the permission reference
Sources
- researchzizmor would have caught the Ultralytics workflow vulnerability
- researchUltralytics AI pwn request supply chain attack
- researchThe Ultralytics supply chain attack: how it happened, how to prevent
- trackerUltralytics AI library hacked via GitHub for cryptomining
- researchThe Ultralytics supply chain attack: connecting the dots
Reported by: GitGuardian