- Description
- MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.
- Source
- zdi-disclosures@trendmicro.com
- NVD status
- Analyzed
- Products
- mlflow
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 3.0
- Type
- Secondary
- Base score
- 8.1
- Impact score
- 5.9
- Exploitability score
- 2.2
- Vector string
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- zdi-disclosures@trendmicro.com
- CWE-22
- Hype score
- Not currently trending
CVE-2025-11201: Vulnerabilidad Crítica en MLflow Afecta la Seguridad de los Modelos de Machine Learning https://t.co/q3X2Oiglw9
@Edodelatorred
10 Nov 2025
0 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-11201: Vulnerabilidad Crítica en MLflow Afecta la Seguridad de los Modelos de Machine Learning https://t.co/vsJl9boIIW
@matarturo
9 Nov 2025
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
MLflow just had a bad week... Two CVEs dropped (CVE-2025-11200 (found be me 😆), CVE-2025-11201): authentication bypass via weak passwords + directory traversal RCE. Both unauthenticated, both trivial to exploit. Both submitted through the @thezdi program. If you're running
@gothburz
1 Nov 2025
617 Impressions
0 Retweets
6 Likes
1 Bookmark
0 Replies
0 Quotes
MLflow Tracking Server: CVE-2025-11201 Summary Directory traversal in MLflow Tracking Server allows remote code execution. Organizations should patch fast. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #MLflow https://t.co/ERmpsZlTn5
@ZeroPathLabs
29 Oct 2025
63 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… https://t.co/RTrOmOiVeZ
@CVEnew
29 Oct 2025
325 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5D3A5C42-816B-4579-8616-C8A4D0C3483D",
"versionEndExcluding": "2025-06-10",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]