Aller au contenu
en Se connecter
8.8 Élevée

CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows…

Description

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit FileStore.start_trace() to write trace_info.yaml, request_metadata, and tag files with attacker-controlled metadata outside the intended experiment trace directory, subject to the server process's filesystem permissions. FileStore is the default tracking backend before MLflow 3.7.0 and opt-in thereafter (the default changed to a SQLite database), so deployments in the earlier part of the affected range are vulnerable without special configuration while later ones are affected only when FileStore is explicitly selected.

Produits et versions touchés

Produit Versions touchées Corrigé en
MLflow 3.17 premières → 3.17.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de MLflow

Les 38 CVE de MLflow →
CVE-2026-118628 MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability 8.2 Élevée CVE-2026-118627 MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 Élevée CVE-2026-118626 MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability 5.4 Moyenne CVE-2026-118625 MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability 6.3 Moyenne
Suivre cette CVE