HIGH7.5
PYSEC-2026-1655
mlflow vulnerable to Path Traversal
Details
A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/mlflow
Introduced in:
0No fixed version published yet for mlflow (pip). Pin to a known-safe version or switch to an alternative.
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-1594[ADVISORY]
- https://github.com/mlflow/mlflow[PACKAGE]
- https://github.com/mlflow/mlflow/blob/b929a3e727dc48a1eb19b7e954b7897ac09ad3ec/mlflow/utils/uri.py#L246[WEB]
- https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e[WEB]
- https://pypi.org/project/mlflow[PACKAGE]
- https://github.com/advisories/GHSA-m49c-5c52-6696[ADVISORY]