BIT-MLFLOW-2024-1593 Path Traversal via Parameter Smuggling in mlflow/mlflow

A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. Th...

BIT-MLFLOW-2024-4263 Improper Access Control in mlflow/mlflow

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...

GHSA-Q2X7-8RV6-6Q7H vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-jinja2, superset, airflow, mlflow, py3.9-torchvision-cuda-12.3, emissary, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, kserve, kubeflow-volumes-web-app, reflex, nemo, ansible-operator, py3-torchvision-cuda-11.8,...

GHSA-GMJ6-6F8F-6699 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-jinja2, superset, airflow, mlflow, py3.9-torchvision-cuda-12.3, emissary, kubeflow-jupyter-web-app, kserve, kubeflow-volumes-web-app, reflex, nemo, ansible-operator, py3-torchvision-cuda-11.8, dask-gateway, checkov, localstack...

CVE-2024-56201 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, py3-jinja2, superset, airflow, mlflow, py3.9-torchvision-cuda-12.3, emissary, kubeflow-jupyter-web-app, kserve, kubeflow-volumes-web-app, reflex, nemo, ansible-operator, py3-torchvision-cuda-11.8, dask-gateway, checkov, localstack...

Local Privilege Escalation

MLflow is vulnerable to Local Privilege Escalation. The vulnerability is due to excessive directory permissions, allowing a Time-of-Check to Time-of-Use ToCToU attack when the sparkudf MLflow API is called...

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Cybersecurity researchers have disclosed multiple security flaws impacting open-source machine learning ML tools and frameworks such as MLflow, H2O, PyTorch, and MLeap that could pave the way for code execution. The vulnerabilities, discovered by JFrog, are part of a broader collection of 22...

BIT-MLFLOW-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +175 more potentially affected by CVE-2024-27134 via mlflow (>=0.8.2 <=2.15.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =0.1.3, =3.0.0, =0.1.0, =0.3.5, =0.3.8 and more Source cves: CVE-2024-27134 Source advisory: OSV:GHSA-QPGC-W4MG-6V92...

MLflow's excessive directory permissions allow local privilege escalation

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

GHSA-QPGC-W4MG-6V92 MLflow's excessive directory permissions allow local privilege escalation

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to excessive...

autonomize-model-sdk (=1.0.4), autorad (=0.2.6) +37 more potentially affected by CVE-2024-27134 via mlflow (>=2.0.0rc0 <=2.15.1)

mlflow PYPI version =2.0.0rc0, =0.1.3, =1.2.0, =0.8.0, =0.0.10, =1.0.0, =0.0.1, =0.1.0, =1.10.2, =0.1.2, =1.2.7, =0.1.0, =0.1.1, =0.1.5 - justmltools =3.9.3 and more Source cves: CVE-2024-27134 Source advisory: SNYK:PYTHON-MLFLOW-8400874...

CVE-2024-27134

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +175 more potentially affected by CVE-2024-27134 via mlflow (>=0.8.2 <=2.15.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =0.1.3, =3.0.0, =0.1.0, =0.3.5, =0.3.8 and more Source cves: CVE-2024-27134 Source advisory: OSV:PYSEC-2024-224...

PYSEC-2024-224

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134

CVE-2024-27134 : Multiple connected sources confirm a vulnerability in MLflow’s spark_udf API where excessive directory permissions allow a local attacker to achieve privilege escalation via a ToCToU attack. Affected: MLflow (spark_udf path) with local execution context. Root cause: insufficient ...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...

CVE-2024-27134 Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...