Django Remote Code Execution Bug

A critical vulnerability in Django 3.29.1 allows unauthenticated attackers to execute arbitrary code on the server.

Django, a popular web application framework, fails to authenticate requests and validates user input without an allowlist.

Attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs.