PYSEC-2026-417
Remote Code Execution due to Full Controled File Write in mlflow
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-6018
- Alias
- BIT-mlflow-2023-6018, GHSA-5p3h-7fwh-92rc
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · mlflow | introduced 0, fixed 2.9.2 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2023-6018 ADVISORY
- https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd WEB
- https://github.com/mlflow/mlflow PACKAGE
- https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30 WEB
- https://pypi.org/project/mlflow PACKAGE
- https://github.com/advisories/GHSA-5p3h-7fwh-92rc ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |