Path Traversal

mlflow is vulnerable to Path Traversal. The vulnerability is caused by a missing validation on Windows file paths starting with driver letter and colon (e:g C:…) which result into relative paths when ultimately evaluated. This can lead to an attacker breaking out of the root mlflow directory (e.g: by exploiting /api/2.0/mlflow-artifacts/artifacts endpoint ) and access sensitive files/data.