A directory traversal vulnerability in the /get-artifact API method of the mlflow…
Priority MEDIUM 41CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.
Summary
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00996 62nd percentileScored 2026-11-07
Fix Fixed mlflow (PyPI): 2.0.0rc0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | mlflow (PyPI) | before 2.0.0rc0 | 2.0.0rc0 | Patch available | GHSA-wc6j-5g83-xfm6 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- mlflow (PyPI) Vendor— Affected before 2.0.0rc0 Fixed in 2.0.0rc0 Patch available GHSA-wc6j-5g83-xfm6
Remediation
- Fix · GHSA-wc6j-5g83-xfm6 mlflow (PyPI) Fixed in 2.0.0rc0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2023-30172
- 2026-10-03 Alias added: GHSA-wc6j-5g83-xfm6
References
Other 7
- https://github.com/mlflow/mlflow/issues/7166
- https://github.com/mlflow/mlflow/issues/7166#issuecomment-1541543234
- https://github.com/mlflow/mlflow/pull/7170
- https://github.com/mlflow/mlflow/commit/ac4b697bb0bb8a331944dca63f4235b4bf602ab8
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/commits/v2.0.0?after=00c3b0a350a28c25b16fbb7feddb8147a919ce18+69&branch=v2.0.0&qualified_name=refs%2Ftags%2Fv2.0.0
- https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-70.yaml
More Mlflow vulnerabilities
- TI-2026-46366 Server-side request forgery in mlflow KEVCVSS 3.1CRITICAL 9.3
- TI-2023-03518 Absolute Path Traversal in mlflow/mlflow CVSS 3.1CRITICAL 10.0
- TI-2023-01113 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
- TI-2025-14028 Command Injection in mlflow/mlflow CVSS 3.1CRITICAL 10.0
- TI-2023-05540 MLflow Authentication Bypass CVSS 3.1CRITICAL 9.8
- TI-2023-02603 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-30172 · CVE Program
- CVE-2023-30172 · NVD
- FIRST EPSS
- GHSA-wc6j-5g83-xfm6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences