CVE-2025-15036criticalCWE-22CWE-29

CVE-2025-15036: critical vulnerability in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Published · Updated

Follow this CVE+ Monitor mlflow/mlflow+ Monitor mlflow

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 0.6%
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
mlflow · mlflow/mlflow
Related CVEs — mlflow/mlflow

In the same product, most dangerous first.

CVE-2023-6909HIGHPath Traversal: '\..\filename' in mlflow/mlflowEPSS 89.7%CVE-2023-1177CRITICALPath Traversal: '\..\filename' in mlflow/mlflowEPSS 69.7%CVE-2023-3765CRITICALAbsolute Path Traversal in mlflow/mlflowEPSS 67.3%CVE-2023-6018CRITICALMLflow Arbitrary File WriteEPSS 47.9%CVE-2024-3848HIGHPath Traversal Bypass in mlflow/mlflowEPSS 43.0%CVE-2024-2928HIGHLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowEPSS 21.8%