Log in Start free

Vulnerability · Published Mar 18, 2026 · Assigned by @huntr_ai

CVE-2025-15031Path Traversal Vulnerability in mlflow/mlflow

High 8.1

In plain English

A high-severity path traversal in mlflow/mlflow from mlflow. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.8%top 41.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPImlflow3.9.0rc0GHSA-fhff-qmm8-h2fp
PyPImlflow3.9.0rc0PYSEC-2026-2656

Affected products (as reported)

VendorProductVersions
mlflow mlflow/mlflow unspecified – through latest

Weakness: CWE-22 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References