CVE-2025-15036

Published Mar 30, 2026

Last updated 17 days ago

MLflow

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-15036 is a path traversal vulnerability found in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This flaw affects versions prior to v3.7.0. The vulnerability arises from insufficient validation of tar member paths during archive extraction. An attacker who can control the tar.gz file can exploit this to overwrite arbitrary files or achieve elevated privileges, potentially enabling them to escape the sandbox directory in multi-tenant or shared cluster environments.

Description: A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.
Source: security@huntr.dev
NVD status: Analyzed
Products: mlflow

Risk scores

CVSS 3.1

Type: Primary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

CVSS 3.0

Type: Secondary
Base score: 9.6
Impact score: 6
Exploitability score: 2.8
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security@huntr.dev: CWE-29

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:lfprojects:mlflow:*:-:*:*:*:*:*:*",
            "matchCriteriaId": "92FE125F-996A-4B7B-8135-F9ADDAC3F398",
            "versionEndExcluding": "3.9.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.