Aller au contenu
en Se connecter
10.0 Critique

CVE-2025-15379 A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the…

Description

A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency specifications from the model artifact's `python_env.yaml` file and directly interpolates them into a shell command without sanitization. This allows an attacker to supply a malicious model artifact and achieve arbitrary command execution on systems that deploy the model. The vulnerability affects versions 3.8.0 and is fixed in version 3.8.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
mlflow/mlflow 3.8 premières → < 3.8.2 3.8.2
Red Hat OpenShift AI (RHOAI) Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de mlflow/mlflow

Les 55 CVE de mlflow/mlflow →
CVE-2026-8147 In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper… 8.1 Élevée CVE-2026-4035 A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI… 9.1 Critique CVE-2026-3198 MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API… 6.5 Moyenne CVE-2026-2651 A vulnerability in MLflow… 9.0 Critique
Suivre cette CVE