crítica
CVE-2025-15036
mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
GHSA9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Bitnami9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, GHSA, Bitnami. Más baja según Red Hat (alta).
Descripción
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mlflow | 3.9.0 |
| pip::GitHub Security Advisory pip | mlflow | 3.9.0rc0 |
Referencias
- https://access.redhat.com/security/cve/CVE-2025-15036
- https://bugzilla.redhat.com/show_bug.cgi?id=2452925
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346
- https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0
- https://nvd.nist.gov/vuln/detail/CVE-2025-15036
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15036.json
- https://www.cve.org/CVERecord?id=CVE-2025-15036