PT-2026-28273 · Databricks · Mlflow

Published 2026-03-30 · Updated 2026-03-30 · CVE-2025-15036

Positive Technologies · (AI Summary)

CVSS v3.1

9.6

Critical

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions mlflow versions prior to 3.7.0

Description A path traversal issue exists in the extract archive to dir function within the mlflow/pyfunc/dbconnect artifact cache.py file of the mlflow/mlflow repository. The issue is due to insufficient validation of tar member paths during extraction. An attacker controlling the tar.gz file could exploit this to overwrite files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments. The vulnerable function is extract archive to dir.

Recommendations Update to version 3.7.0 or later. As a temporary workaround, avoid using untrusted or unverified tar.gz files with the extract archive to dir function.

Fix

Weakness Enumeration

CWE-29

Related Identifiers

CVE-2025-15036

Affected Products

Mlflow

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-15036 · Security Note
• https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346 · Note
• https://twitter.com/0dayPublishing/status/2038430839466275183 · Twitter Post
• https://twitter.com/TheHackerWire/status/2038441092421722230 · Twitter Post
• https://twitter.com/CveFindCom/status/2038446813703713079 · Twitter Post
• https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0 · Note
• https://twitter.com/cyberbivash/status/2038463162383528381 · Twitter Post