CVE-2023-1177

CVE-2023-1177 | | MLFlow 路径遍历 | 已在 MLflow 2.2.0 上测试 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST "$URL/ajax-api/2.0/mlflow/registered-models/create" -d...

CVE-2024-37054

CVE-2024-37054 — MLflow Pickle 反序列化 RCE 针对 MLflow Tracking Server 中一个严重的 pickle 反序列化漏洞的概念验证利用，可实现已认证远程代码执行。 ⚠️ 仅用于教育和授权安全测试。请勿对不属于您或未经您明确书面授权的系统使用。 漏洞概述 字段| 值 ---|--- CVE ID| CVE-2024-37054 CVSS 评分| 8.8（高危） CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 受影响版本| MLflow 2.14.3 修复版本| MLflow ≥...

CVE-2024-37054-PoC

説明 CVE-2024-37054の概念実証です。MLflowバージョン0.9.0から2.14.1における深刻なデシリアライゼーションの脆弱性です。 悪意のあるpyfuncモデルが mlflow.pyfunc.loadmodel を介して読み込まれると、pickleされたペイロードが任意のコードを実行します。 ファイル exploit.py — 完全なエクスプロイト: 登録、訓練、アップロード、トリガー HTB SmartHire Machine向け buildmodel.py — 悪意のあるモデルをローカルでビルド ビルドのみ 使用方法 モデルをローカルでビルド...

MLflow-Vuln

Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow 漏洞 MLflow LFI/RFI 漏洞 - CVE-2023-1177 - 已复现 MLflow 是机器学习系统中用于管理端到端机器学习生命周期的热门工具之一。我测试了 MLflow 的安全性，并复现了一个结合了本地文件包含/远程文件包含的漏洞，该漏洞可能导致整个系统或云服务提供商的沦陷。MLflow 2.2.1 之前的版本存在本地文件包含漏洞，原因是其用于获取模型版本和注册模型的 API 对用户输入的清理不足。攻击者可利用此漏洞读取服务器文件系统上的任意文件。 影响：...

CVE-2024-37054

CVE-2024-37054 — MLflow pyfunc 反序列化 RCE 严重性： 严重 受影响版本： MLflow 0.9.0 – 2.14.1 类型： 通过 Python pickle 反序列化实现任意代码执行 描述 mlflow.pyfunc.loadmodel 从工件存储中反序列化 pythonmodel.pkl 且不带任何清理。能够访问 MLflow 工件 REST API 的攻击者可以用恶意 pickle 覆盖该文件，从而在下次加载模型时执行任意操作系统命令。 要求 root@kitploit: pip install requests cloudpickle 用法...

CVE-2024-37054-MLflow-RCE

root@kitploit: | / || | | || | / \ \ / / | |/| || | | | | | | | | |\ \ /\ / / | | | || | | | | || || | \ V V / || |||||| ||/ // | \ / || | | \ / | | | || | | | | | |/ \ | | | | | | | | /| || | || \ ||| || / | CVE-2024-37054: MLflow リモートコード実行 PoC...

Mlflow <2.8.0 - Local File Inclusion

Mlflow before 2.8.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2023-6977...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

mlflow - Path Traversal

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. id: CVE-2023-6831 info: name: mlflow - Path Traversal author: byObin severity: high description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. impact: | Authenticated attackers...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

Mlflow <2.2.1 - Local File Inclusion

Mlflow before 2.2.1 is susceptible to local file inclusion due to path traversal ..\filename in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id:...

Mlflow <2.3.0 - Local File Inclusion

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. id: CVE-2023-2356 info: name: Mlflow 2.3.0 - Local File Inclusion author: Co5mos severity: high description: | Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. impact: | Successful exploitation...

Mlflow <2.3.1 - Local File Inclusion Bypass

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. id: CVE-2023-2780 info: name: Mlflow 2.3.1 - Local File Inclusion Bypass author: iamnoooob,pdresearch severity: critical description: | Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

Mlflow - Arbitrary File Write

An attacker can overwrite any file on the server hosting MLflow without any authentication. id: CVE-2023-6018 info: name: Mlflow - Arbitrary File Write author: byt3bl33d3r severity: critical description: | An attacker can overwrite any file on the server hosting MLflow without any authentication...

MLflow <= 3.9.0 - Arbitrary File Read

mlflow mlflow = 3.9.0 contains a path traversal caused by bypassing source path validation via the mlflow.prompt.isprompt tag in CreateModelVersion request, letting unauthenticated remote attackers read arbitrary files. id: CVE-2026-2614 info: name: MLflow = 3.9.0 - Arbitrary File Read author:...

Mlflow < 2.9.2 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifactlocation' and 'source' parameters, using a local URI with '' instead of '?', an attacker can...

Mlflow - Cross-Site Scripting

The vulnerability allows an attacker to inject malicious code into the Content-Type header of a POST request, which is then reflected back to the user without proper sanitization or escaping. id: CVE-2023-6568 info: name: Mlflow - Cross-Site Scripting author: ritikchaddha severity: medium...

MLflow Absolute Path Traversal

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. id: CVE-2023-3765 info: name: MLflow Absolute Path Traversal author: DhiyaneshDK severity: critical description: | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. impact: | This vulnerability can...

MLflow Job API - Authentication Bypass

MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/ when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions. id:...

MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass

MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint. id: CVE-2026-64849 info:...