MLflowGHSA-f82r-jj5r-6g97
mlflow Path Traversal vulnerability
High7.5CVE-2024-1483 · Published Apr 16, 2024 · updated Jul 7, 2026
A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifact_location' and 'source' parameters, using a local URI with '#' instead of '?', an attacker can traverse the server's directory structure. The issue occurs due to insufficient validation of user-supplied input in the server's handlers.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mlflow PyPI | < 2.12.1 | 2.12.1 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- BIT-mlflow-2024-1483, CVE-2024-1483, PYSEC-2026-1650
More MLflow advisories
All MLflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 162024 | MLflow has a Local File Read/Path Traversal bypass High7.5May 16, 2024 | High7.5 | 2.12.1 |
| Apr 162024 | mlflow vulnerable to Path TraversalCritical9.3Apr 16, 2024 | Critical9.3 | 2.10.0 |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh8.1Apr 16, 2024 | High8.1 | No fix yet |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh7.5Apr 16, 2024 | High7.5 | No fix yet |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh7.5Apr 16, 2024 | High7.5 | 2.12.1 |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh7.5Apr 16, 2024 | High7.5 | No fix yet |