Critical · published October 30, 2025
🚨 A sneaky path traversal flaw means an attacker can execute arbitrary code on your MLflow Tracking Server with just a user-supplied model path — no authentication required! 🔥 Think of it like a delivery driver using an unfixed address; they simply show up at any door believing it’s valid, which could lead to some unwanted surprises inside! An attacker could waltz in and run any code they want, operating under the service account's permissions. This could lead to unauthorized access to sensitive data, disruption of services, or worse yet, a full compromise of the server's environment. Yikes!
Think of it like a delivery driver using an unfixed address; they simply show up at any door believing it’s valid, which could lead to some unwanted surprises inside! This vulnerability arises from improper validation of user-supplied model file paths in the MLflow Tracking Server, allowing attackers to leverage directory traversal techniques to execute harmful code.
An attacker could waltz in and run any code they want, operating under the service account's permissions. This could lead to unauthorized access to sensitive data, disruption of services, or worse yet, a full compromise of the server's environment. Yikes! To protect your installations, immediately update to the latest version of MLflow Tracking Server where this flaw has been patched. Additionally, review your file handling practices to ensure robust validation of file paths to prevent similar issues. 🛡️ You've got this! Stay vigilant, follow these steps, and your server will be safe and sound! 😄
| Product | Versions | Fixed in |
|---|---|---|
| lfprojects/mlflow | < 2025-06-10 | 2025-06-10 |