Absolute Path Traversal in mlflow/mlflow

MEDIUM 55CWE-36Published 2023-03-24 · Updated 2025-02-19

Key facts

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00578 47th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed mlflow/mlflow (mlflow): 2.2.2mlflow (PyPI): 2.2.1

CISA ADP · SSVC 2.0.3

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Vendor	Product	Affected versions	Fixed in	Status	Source
MLflow	mlflow/mlflow	before 2.2.2	2.2.2	Patch available	CNA
—	mlflow (PyPI)	before 2.2.1	2.2.1	Patch available	GHSA-wp72-7hj9-5265

mlflow/mlflow VendorMLflow Affected before 2.2.2 Fixed in 2.2.2 Patch available CNA
mlflow (PyPI) Vendor— Affected before 2.2.1 Fixed in 2.2.1 Patch available GHSA-wp72-7hj9-5265

CPE	Versions	Role	Vendor
cpe:2.3:a:lfprojects:mlflow::::::::	before 2.2.2	Vulnerable	MLflow

cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* Versions before 2.2.2 Vulnerable ·MLflow

TI-2026-46366 Server-side request forgery in mlflow KEVCVSS 3.1CRITICAL 9.3
TI-2023-03518 Absolute Path Traversal in mlflow/mlflow CVSS 3.1CRITICAL 10.0
TI-2023-01113 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
TI-2025-14028 Command Injection in mlflow/mlflow CVSS 3.1CRITICAL 10.0
TI-2023-05540 MLflow Authentication Bypass CVSS 3.1CRITICAL 9.8
TI-2023-02603 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences