Vulnerability · Published Nov 16, 2023 · Assigned by @huntr_ai
CVE-2023-6018MLflow Arbitrary File Write
Critical 10.0
In plain English
A critical-severity OS command injection in mlflow/mlflow from mlflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 47.9% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.0)10.0Critical
Exploit odds (30 days)47.9%top 1.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
An attacker can overwrite any file on the server hosting MLflow without any authentication.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | mlflow | 2.9.2 | GHSA-5p3h-7fwh-92rc |
| PyPI | mlflow | 2.9.2 | PYSEC-2026-417 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| mlflow | mlflow/mlflow | unspecified – through latest |
Weakness: CWE-78 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H