Mlflow · Mlflow · CVE-2024-0520
**Name of the Vulnerable Software and Affected Versions**
mlflow/mlflow version 8.2.1
mlflow/mlflow versions prior to 2.9.0
**Description**
A vulnerability in mlflow/mlflow allows for remote code execution due to improper neutralization of special elements used in an OS command within the `mlflow.data.http dataset source.py` module. When loading a dataset from a source URL with an HTTP scheme, the filename extracted from the `Content-Disposition` header or the URL path is used to generate the final file path without proper sanitization. This enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information.
**Recommendations**
For mlflow/mlflow version 8.2.1, upgrade to version 2.9.0 to fix the issue.
As a temporary workaround, consider restricting access to the `mlflow.data.http dataset source.py` module until a patch is available.
Avoid using unsanitized filenames extracted from the `Content-Disposition` header or the URL path in the affected module until the issue is resolved.