Skip to content
OpenAdvisories
High · 7.5 Scanner template Public exploit CVE-2024-8859 BIT-mlflow-2024-8859EUVD-2025-6887GHSA-4rqf-8pfm-p36rPYSEC-2026-1638

Path Traversal in mlflow/mlflow

Published Mar 20, 2025 · Updated Mar 20, 2025 · Assigned by @huntr_ai

Vendor: MLflow Product: mlflow/mlflow Package: mlflow Ecosystem: PyPI

Description

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.

Affected products

VendorProductAffectedFixed
mlflow mlflow/mlflow unspecified – < 2.17.0 2.17.0

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mlflow < 2.17.0rc0 2.17.0rc0 GHSA-4rqf-8pfm-p36r

References