PT-2024-15633 · Mlflow · Mlflow
Harupy
·
Published
2024-01-20
·
Updated
2025-10-15
·
CVE-2024-0520
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
mlflow/mlflow version 8.2.1
mlflow/mlflow versions prior to 2.9.0
Description
A vulnerability in mlflow/mlflow allows for remote code execution due to improper neutralization of special elements used in an OS command within the
mlflow.data.http dataset source.py module. When loading a dataset from a source URL with an HTTP scheme, the filename extracted from the Content-Disposition header or the URL path is used to generate the final file path without proper sanitization. This enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information.Recommendations
For mlflow/mlflow version 8.2.1, upgrade to version 2.9.0 to fix the issue.
As a temporary workaround, consider restricting access to the
mlflow.data.http dataset source.py module until a patch is available.
Avoid using unsanitized filenames extracted from the Content-Disposition header or the URL path in the affected module until the issue is resolved.Exploit
Fix
RCE
Relative Path Traversal
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Mlflow