CVE-2026-33879
Critical
Description
Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare institutions. The FLIP login page in versions 0.1.1 and prior has no rate limiting or CAPTCHA, enabling brute-force and credential-stuffing attacks. FLIP users are external to the organization, increasing credential reuse risk. As of time of publication, it is unclear if a patch is available.
SeverityCritical
CVSS9.8
Exploit probability—
ProductAicentre Federated Learning And Interoperability Platform
PublishedMar 27, 2026
First seenMar 27, 2026
Weakness typeCWE-307CWE-307
How to fix
Update
- aicentre federated_learning_and_interoperability_platform0.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aicentre federated_learning_and_interoperability_platform | v < 0.1.1 | 0.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.