CVE-2024-10762: Lunary Privilege Escalation Vulnerability

CVE-2024-10762 Overview

CVE-2024-10762 is a missing authorization vulnerability [CWE-862] in the lunary-ai/lunary open-source AI observability platform. Versions before 1.5.9 expose the /v1/evaluators/ endpoint to DELETE requests without enforcing role-based access control. Any authenticated project user, regardless of privilege level, can delete evaluator records belonging to a project. Deletion is permanent and cannot be recovered through the application, disrupting evaluation pipelines and destroying historical evaluator configurations.

Critical Impact
Low-privilege authenticated users can permanently delete project evaluator data, causing integrity loss and operational disruption to Lunary deployments running versions prior to 1.5.9.

Affected Products

lunary-ai/lunary versions prior to 1.5.9
Self-hosted Lunary deployments exposing the /v1/evaluators/ REST API
Multi-tenant Lunary projects with low-privilege collaborator roles

Discovery Timeline

2025-03-20 - CVE-2024-10762 published to the National Vulnerability Database
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2024-10762

Vulnerability Analysis

Lunary is an observability and evaluation platform for large language model (LLM) applications. Evaluators are project-scoped configurations that score, compare, or gate model outputs. The /v1/evaluators/ route accepts DELETE requests to remove these records, but the handler does not attach middleware that validates the caller's project role. Authentication alone is treated as sufficient authorization.

Any user with a valid session token for a project can invoke the delete operation. This includes viewer, member, or other non-administrative roles that should be restricted to read-only or limited-write operations. The result is an integrity and availability impact: evaluator data disappears, and dependent evaluation workflows fail.

Root Cause

The root cause is a missing authorization check on the delete handler for /v1/evaluators/. The route relies on session authentication middleware but omits a role-check middleware comparable to the ones applied to other privileged endpoints. This maps directly to CWE-862: Missing Authorization.

Attack Vector

Exploitation requires network access to the Lunary API and valid credentials for any account associated with the target project. The attacker sends a DELETE request to /v1/evaluators/<evaluator_id> using their session token. The server processes the request and removes the evaluator without verifying whether the caller holds an administrative role. No user interaction from a privileged account is required.

See the fix commit for the specific handler change: lunary-ai/lunary commit 9158749. Additional context is available in the Huntr bounty listing.

Detection Methods for CVE-2024-10762

Indicators of Compromise

Unexpected DELETE /v1/evaluators/ requests in Lunary API access logs, especially from user accounts without administrative roles.
Sudden reduction in the number of evaluators visible in a project or gaps in evaluation results for previously monitored models.
Database records showing evaluator deletions performed by user IDs that do not correspond to project owners or admins.

Detection Strategies

Enable verbose HTTP access logging on the Lunary API and alert on any DELETE verb targeting /v1/evaluators/ paths.
Correlate the acting user's role at the time of the request against the operation performed to identify authorization mismatches.
Baseline normal evaluator lifecycle activity per project and flag deletion bursts or off-hours deletions for review.

Monitoring Recommendations

Forward Lunary application and reverse-proxy logs to a centralized log platform for retention and query.
Track evaluator table row counts over time and alert on unexplained decreases.
Monitor authentication events for the accounts most likely to be abused, including recently invited collaborator accounts.

How to Mitigate CVE-2024-10762

Immediate Actions Required

Upgrade lunary-ai/lunary to version 1.5.9 or later, which introduces the missing authorization check on the evaluator delete route.
Audit project membership and revoke access for users who no longer require it, reducing the population of accounts that could exploit the flaw pre-patch.
Review recent evaluator deletion activity and restore evaluators from database backups where unauthorized removal is suspected.

Patch Information

The fix is applied in commit 9158749 and shipped in Lunary 1.5.9. The patch adds role-based authorization middleware so that only users with appropriate project roles can invoke the DELETE operation on /v1/evaluators/.

Workarounds

Restrict network exposure of the Lunary API so that only trusted operators can reach the /v1/evaluators/ endpoint until the upgrade is deployed.
Place an authenticating reverse proxy or API gateway in front of Lunary that blocks DELETE requests to /v1/evaluators/ from non-admin identities.
Enable database-level backups and point-in-time recovery for the Lunary datastore so evaluator deletions can be reversed.

bash

# Example nginx rule to block DELETE on the evaluators endpoint
# until upgrade to lunary 1.5.9 is complete
location ~ ^/v1/evaluators/ {
    limit_except GET POST PATCH {
        deny all;
    }
    proxy_pass http://lunary_upstream;
}