{"id":"CVE-2021-42951","title":"A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS","summary":"A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, …","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"algorithmia","product":"msol","affected":["msol < 2021-10-10"],"patched":["msol 2021-10-10"],"published":"2022-03-01","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-42951","references":[{"url":"https://seclists.org/fulldisclosure/2022/Feb/33","label":"cve@mitre.org"},{"url":"http://algorithmia.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/fulldisclosure/2022/Feb/33","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01571,"epssPercentile":0.74307,"ingestedAt":"2026-07-06T17:03:23.911Z","slug":"CVE-2021-42951","body":"## Overview\n\nA Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially crafted Algorithm and subsequently launch remote code execution with their desired result.\n\n## Affected\n\n- `msol < 2021-10-10`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `msol 2021-10-10`","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}