mlflow is vulnerable to Path Traversal. The vulnerability exists because the library does not properly validate the source URLs, allowing an attacker to access files outside the expected directory and read arbitrary files through the relative path such as \\..\filename