Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · MLflow

CVE-2024-8859: MLflow has a Local File Read/Path Traversal in dbfs

highCVSS 3.0 7.5GHSA-4rqf-8pfm-p36r

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled.

Published Mar 20, 2025 · Updated Mar 21, 2025

Affected packages

mlflow

Ecosystem
PyPI
Affected
< 2.17.0rc0
Fixed in
2.17.0rc0
Check
pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries