MLflowGHSA-m49c-5c52-6696
mlflow vulnerable to Path Traversal
High7.5CVE-2024-1594 · Published Apr 16, 2024 · updated Jul 7, 2026
A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mlflow PyPI | <= 2.9.2 | No fix yet |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-22
- Also known as
- BIT-mlflow-2024-1594, CVE-2024-1594, PYSEC-2026-1655
More MLflow advisories
All MLflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 162024 | MLflow has a Local File Read/Path Traversal bypass High7.5May 16, 2024 | High7.5 | 2.12.1 |
| Apr 162024 | mlflow vulnerable to Path TraversalCritical9.3Apr 16, 2024 | Critical9.3 | 2.10.0 |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh8.1Apr 16, 2024 | High8.1 | No fix yet |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh7.5Apr 16, 2024 | High7.5 | No fix yet |
| Apr 162024 | mlflow vulnerable to Path TraversalHigh7.5Apr 16, 2024 | High7.5 | 2.12.1 |
| Apr 162024 | mlflow Path Traversal vulnerabilityHigh7.5Apr 16, 2024 | High7.5 | 2.12.1 |