GitHub Advisoryadvisory · PyPI

GHSA-4rqf-8pfm-p36r MLflow has a Local File Read/Path Traversal in dbfs

HIGH Published 2025-03-20 Modified 2025-03-21 Official page ↗
Aliases
CVE-2024-8859
Ecosystem
PyPI
Packages
mlflow
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22, CWE-29
Reviewed
2025-03-21

Affected packages

• PyPI mlflow: < 2.17.0rc0 → fixed in 2.17.0rc0

Description

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.

Related

Alias · CVE (1)

  • CVE-2024-8859 A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-29 Path Traversal: '\..\filename' weakness

References