CRITICAL10.0
PYSEC-2026-417
Remote Code Execution due to Full Controled File Write in mlflow
Quick fix
PYSEC-2026-417 — mlflow: upgrade to the fixed version with the command below.
pip install --upgrade 'mlflow>=2.9.2'Details
The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-6018[ADVISORY]
- https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd[WEB]
- https://github.com/mlflow/mlflow[PACKAGE]
- https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30[WEB]
- https://pypi.org/project/mlflow[PACKAGE]
- https://github.com/advisories/GHSA-5p3h-7fwh-92rc[ADVISORY]