by Kastro
Paper/Archive/CVE-2025-15036

CVE-2025-15036

mlflow mlflow/mlflow — Path Traversal Vulnerability in mlflow/mlflow

EPSS 0.6%public exploitCVSS 10.0
critical.is priorityof 100
50
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 48.2.482 × 209.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.

Affected

ProductAffectedFixed inSource
mlflow/mlflowunspecified – < 3.9.03.9.0CNA
Red Hat OpenShift AI (RHOAI)see advisory–redhat-SADP
Red Hat OpenShift AI (RHOAI)see advisory–redhat-SADP

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
@huntr_ai (CNA)9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
redhat-SADP (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refhuntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0refgithub.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346refaccess.redhat.com/security/cve/CVE-2025-15036refbugzilla.redhat.com/show_bug.cgi?id=2452925refsecurity.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15036.json