BIT-MLFLOW-2024-4263 Improper Access Control in mlflow/mlflow

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...

GHSA-Q2X7-8RV6-6Q7H vulnerabilities

Vulnerabilities for packages: ansible-operator, py3-torchvision-cuda-11.8, py3-jinja2, py3.9-torchvision-cuda-12.3, dask-gateway, reflex, emissary, kubeflow-pipelines-visualization-server, checkov, localstack, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, mlflow, kserve, nemo, airflow,...

GHSA-GMJ6-6F8F-6699 vulnerabilities

Vulnerabilities for packages: ansible-operator, py3-torchvision-cuda-11.8, py3-jinja2, py3.9-torchvision-cuda-12.3, dask-gateway, reflex, emissary, checkov, localstack, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, mlflow, kserve, nemo, airflow, superset, apache-beam-python-3.11-sdk...

CVE-2024-56201 vulnerabilities

Vulnerabilities for packages: ansible-operator, py3-torchvision-cuda-11.8, py3-jinja2, py3.9-torchvision-cuda-12.3, dask-gateway, reflex, emissary, checkov, localstack, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, mlflow, kserve, nemo, airflow, superset, apache-beam-python-3.11-sdk...

Local Privilege Escalation

MLflow is vulnerable to Local Privilege Escalation. The vulnerability is due to excessive directory permissions, allowing a Time-of-Check to Time-of-Use ToCToU attack when the sparkudf MLflow API is called...

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning ML tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for code execution. The vulnerabilities, discovered by JFrog, are part of a broader collection of 22...

BIT-MLFLOW-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

MLflow's excessive directory permissions allow local privilege escalation

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +175 more potentially affected by CVE-2024-27134 via mlflow (>=0.8.2 <=2.15.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =0.1.3, =3.0.0, =0.1.0, =0.3.5, =0.3.8 and more Source cves: CVE-2024-27134 Source advisory: OSV:GHSA-QPGC-W4MG-6V92...

GHSA-QPGC-W4MG-6V92 MLflow's excessive directory permissions allow local privilege escalation

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

autonomize-model-sdk (=1.0.4), autorad (=0.2.6) +37 more potentially affected by CVE-2024-27134 via mlflow (>=2.0.0rc0 <=2.15.1)

mlflow PYPI version =2.0.0rc0, =0.1.3, =1.2.0, =0.8.0, =0.0.10, =1.0.0, =0.0.1, =0.1.0, =1.10.2, =0.1.2, =1.2.7, =0.1.0, =0.1.1, =0.1.5 - justmltools =3.9.3 and more Source cves: CVE-2024-27134 Source advisory: SNYK:PYTHON-MLFLOW-8400874...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to excessive...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +175 more potentially affected by CVE-2024-27134 via mlflow (>=0.8.2 <=2.15.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =0.1.3, =3.0.0, =0.1.0, =0.3.5, =0.3.8 and more Source cves: CVE-2024-27134 Source advisory: OSV:PYSEC-2024-224...

CVE-2024-27134

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

PYSEC-2024-224

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134

CVE-2024-27134 : Multiple connected sources confirm a vulnerability in MLflow’s spark_udf API where excessive directory permissions allow a local attacker to achieve privilege escalation via a ToCToU attack. Affected: MLflow (spark_udf path) with local execution context. Root cause: insufficient ...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

MLflow 安全漏洞

MLflow is an open source platform from MLflow that simplifies machine learning development, including tracking experiments, packaging code into repeatable runs, and sharing and deploying models. A security vulnerability exists in MLflow that stems from excessive directory permissions that can lea...