CVE-2026-127202MLflow < 3.18.0 Path Traversal via model_id in log_outputs API

Beschreibung

MLflow before 3.18.0 using the FileStore backend contains a path traversal vulnerability that allows unauthenticated remote attackers to write files outside the intended run directory by supplying a malicious model_id parameter to the log outputs API. Attackers can exploit the unvalidated model_id containing ../ sequences via the POST /api/3.0/mlflow/runs/outputs endpoint to create directories and write a meta.yaml file at arbitrary filesystem locations, limited only by the server account's permissions. FileStore was the default backend before 3.7.0 and is opt-in afterward through MLFLOW_ALLOW_FILE_STORE.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• Release Notes release-notes
• Pull Request issue-trackingpatch
• Patch Commit patchissue-tracking
• VulnCheck Advisory: MLflow < 3.18.0 Path Traversal via model_id in log_outputs API third-party-advisory