AI agent vulnerability · MLflow

CVE-2024-1558: mlflow vulnerable to Path Traversal

highCVSS 3.0 7.5GHSA-j62r-wxqq-f3gf

A path traversal vulnerability exists in the createmodelversion() function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the validatenonlocalsourcecontainsrelativepaths(source) function's checks, allowing for arbitrary file read access on the server.

Published Apr 16, 2024 · Updated Aug 9, 2024

Affected packages

mlflow

Ecosystem: PyPI
Affected: <= 2.9.2
Fixed in: 2.12.1
Check: pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A path traversal vulnerability exists in the _create_model_version() function within server/handlers.py of the mlflow/mlflow repository, due to improper validation of the source parameter. Attackers can exploit this vulnerability by crafting a source parameter that bypasses the _validate_non_local_source_contains_relative_paths(source) function's checks, allowing for arbitrary file read access on the server. The issue arises from the handling of unquoted URL characters and the subsequent misuse of the original source value for model version creation, leading to the exposure of sensitive files when interacting with the /model-versions/get-artifact handler.

Credited to mberges21.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries