Lucene search
+L

2 matches found

OSV
OSV
added 2026/05/18 9:31 p.m.32 views

GHSA-F2M9-WCF4-CWWX MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

7CVSS6.3AI score0.00193EPSS
SaveExploits1References5
Rows per page
Query Builder