Paper/Archive/CVE-2025-11201

CVE-2025-11201

MLflow MLflow — MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 98.0.980 × 2019.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.

Affected

ProductAffectedFixed inSource

MLflow2.21.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

zdi (CNA)8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refzerodayinitiative.com/advisories/ZDI-25-931 advisorygithub.com/B-Step62/mlflow/commit/2e02bc7bb70df243e6eb792689d9b8eba0013161