Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
At a glance
Severity
HIGH 7.0
EPSS
EPSS 0.12 % · percentile 2 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
JFROG
NVD status
Analyzed
Description
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
GHSA-qpgc-w4mg-6v92 — MLflow's excessive directory permissions allow local privilege escalation
PYSEC-2024-224 — Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain e
