Path Traversal in mlflow/mlflow (mlflow mlflow/mlflow)
At a glance
- Source
- NVD
- EPSS
- EPSS 2.77 % · percentile 86 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- @huntr_ai
- NVD status
- Analyzed
Description
A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.
Weaknesses (CWE)
- CWE-29 — Path Traversal: '\..\filename'
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | @huntr_ai |
| CVSS 3.0 | HIGH 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | NVD · security@huntr.dev (Secondary) |
Advisories
- GHSA-4rqf-8pfm-p36r — MLflow has a Local File Read/Path Traversal in dbfs
- PYSEC-2026-1638 — MLflow has a Local File Read/Path Traversal in dbfs
European references
- ENISA EUVD · EUVD-2025-6887
- GCVE · GCVE-0-2024-8859
Affected configurations (NVD CPE)
cpe:2.3:a:lfprojects:mlflow:2.15.1:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| mlflow · mlflow/mlflow | affected unspecified < 2.17.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |