TechPrufer
Sign inGet started

Blogs›Replicate›Network Security and Isolation

Network Security and Isolation

Network Security and Isolation

1
posts
2024

Replicate has implemented enhanced network security measures for model containers, including encrypting all internal traffic and restricting privileged network access. This follows the disclosure of a vulnerability where model containers could eavesdrop on internal communications due to shared network namespaces and unencrypted traffic. The company has mitigated this by dropping NET_ADMIN and NET_RAW capabilities from model containers and encrypting all internal TLS traffic.

2024

Shared network vulnerability disclosure

5/23/2024

This post details a security vulnerability where model containers could access sensitive data by eavesdropping on internal network traffic due to shared network namespaces and unencrypted communications between model processes and their 'director' services. Replicate responded by encrypting all internal traffic with TLS and removing raw network access capabilities (NET_ADMIN, NET_RAW) from model containers, effectively mitigating the vulnerability. No evidence of exploitation was found.