CVE-2024-27134CWE-276CWE-367

Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

High · published November 25, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weaknesses
CWE-276 · Incorrect Default Permissions; CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-11-25T13:48Z
EPSS history
Timeline
  • 25 NOV 13:48Z
    Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
    cvelistv5