critique
CVE-2025-15036
mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
GHSA9.6CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Bitnami9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, GHSA, Bitnami. Plus basse selon Red Hat (élevée).
Description
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | mlflow | 3.9.0 |
| pip::GitHub Security Advisory pip | mlflow | 3.9.0rc0 |
Références
- https://access.redhat.com/security/cve/CVE-2025-15036
- https://bugzilla.redhat.com/show_bug.cgi?id=2452925
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346
- https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0
- https://nvd.nist.gov/vuln/detail/CVE-2025-15036
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15036.json
- https://www.cve.org/CVERecord?id=CVE-2025-15036