8.1
Élevée
CVE-2026-2033 MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
Description
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of artifact file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26649.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| MLflow | Versions non publiées |
Références
- ZDI-26-105 www.zerodayinitiative.com
- vendor-provided URL github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift AI (RHOAI)
Les 388 CVE de Red Hat OpenShift AI (RHOAI) →
CVE-2026-83494
Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
Non notée
CVE-2026-83493
Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master
Non notée
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
Élevée
CVE-2026-120194
Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step
7.5
Élevée