7.0
Élevée
CVE-2025-10279 In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure…
Description
In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race condition and overwrite `.py` files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| mlflow/mlflow 3.4 | premières → < 3.4.0 | 3.4.0 |
Références
- huntr.com huntr.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de mlflow/mlflow
Les 55 CVE de mlflow/mlflow →
CVE-2026-8147
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper…
8.1
Élevée
CVE-2026-4035
A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI…
9.1
Critique
CVE-2026-3198
MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API…
6.5
Moyenne
CVE-2026-2651
A vulnerability in MLflow…
9.0
Critique