Relative Path Traversal

🗓️ 24 Mar 2025 05:53:33Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 26 Views

mlflow vulnerable to Relative Path Traversal allows arbitrary file reads via improper URL handling.

Reporter	Title	Published	Views	Family All 100
CNNVD	MLFlow security vulnerabilities	20 Mar 202500:00	–	cnnvd
CVE	CVE-2024-8859	20 Mar 202510:09	–	cve
Cvelist	CVE-2024-8859 Path Traversal in mlflow/mlflow	20 Mar 202510:09	–	cvelist
Github Security Blog	MLflow has a Local File Read/Path Traversal in dbfs	20 Mar 202512:32	–	github
Mend	CVE-2024-8859	20 Mar 202510:09	–	mend
Nuclei	Mlflow < 2.17.0 - Local File Inclusion	22 Oct 202602:06	–	nuclei
NVD	CVE-2024-8859	20 Mar 202510:15	–	nvd
osv_bit	BIT-MLFLOW-2024-8859 Path Traversal in mlflow/mlflow	6 Aug 202505:45	–	osv_bit
osv_clsa	CLSA-2026-1780879892 TuxCare security update for mlflow (5 CVEs)	4 Aug 202614:52	–	osv_clsa
osv_ghsa	GHSA-4RQF-8PFM-P36R MLflow has a Local File Read/Path Traversal in dbfs	20 Mar 202512:32	–	osv_ghsa

Vulners

Node

mlflow mlflowRange2.3.1–2.16.2python

mlflow mlflowMatch0.0.1python

mlflow mlflowMatch0.1.0python

mlflow mlflowMatch0.2.0python

mlflow mlflowMatch0.2.1python

mlflow mlflowMatch0.3.0python

mlflow mlflowMatch0.4.0python

mlflow mlflowMatch0.4.1python

mlflow mlflowMatch0.4.2python

mlflow mlflowMatch0.5.0python

mlflow mlflowMatch0.5.1python

mlflow mlflowMatch0.5.2python

mlflow mlflowMatch0.6.0python

mlflow mlflowMatch0.7.0python

mlflow mlflowMatch0.8.0python

mlflow mlflowMatch0.8.1python

mlflow mlflowMatch0.8.2python

mlflow mlflowMatch0.9.0python

mlflow mlflowMatch0.9.0.1python

mlflow mlflowMatch0.9.1python

mlflow mlflowMatch1.0.0python

mlflow mlflowMatch1.1.0python

mlflow mlflowMatch1.1.1.dev0python

mlflow mlflowMatch1.10.0python

mlflow mlflowMatch1.11.0python

mlflow mlflowMatch1.12.0python

mlflow mlflowMatch1.12.1python

mlflow mlflowMatch1.13python

mlflow mlflowMatch1.13.1python

mlflow mlflowMatch1.14.0python

mlflow mlflowMatch1.14.1python

mlflow mlflowMatch1.15.0python

mlflow mlflowMatch1.16.0python

mlflow mlflowMatch1.17.0python

mlflow mlflowMatch1.18.0python

mlflow mlflowMatch1.19.0python

mlflow mlflowMatch1.2.0python

mlflow mlflowMatch1.20.0python

mlflow mlflowMatch1.20.1python

mlflow mlflowMatch1.20.2python

mlflow mlflowMatch1.21.0python

mlflow mlflowMatch1.22.0python

mlflow mlflowMatch1.23.0python

mlflow mlflowMatch1.23.1python

mlflow mlflowMatch1.24.0python

mlflow mlflowMatch1.25.0python

mlflow mlflowMatch1.25.1python

mlflow mlflowMatch1.26.0python

mlflow mlflowMatch1.26.1python

mlflow mlflowMatch1.27.0python

mlflow mlflowMatch1.28.0python

mlflow mlflowMatch1.29.0python

mlflow mlflowMatch1.3.0python

mlflow mlflowMatch1.30.0python

mlflow mlflowMatch1.30.1python

mlflow mlflowMatch1.4.0python

mlflow mlflowMatch1.5.0python

mlflow mlflowMatch1.6.0python

mlflow mlflowMatch1.7.0python

mlflow mlflowMatch1.7.1python

mlflow mlflowMatch1.7.2python

mlflow mlflowMatch1.8.0python

mlflow mlflowMatch1.9.0python

mlflow mlflowMatch1.9.1python

mlflow mlflowMatch2.0.0python

mlflow mlflowMatch2.0.0rc0python

mlflow mlflowMatch2.0.1python

mlflow mlflowMatch2.1.0python

mlflow mlflowMatch2.1.1python

mlflow mlflowMatch2.10.0python

mlflow mlflowMatch2.10.1python

mlflow mlflowMatch2.10.2python

mlflow mlflowMatch2.11.0python

mlflow mlflowMatch2.11.1python

mlflow mlflowMatch2.11.2python

mlflow mlflowMatch2.11.3python

mlflow mlflowMatch2.11.4python

mlflow mlflowMatch2.12.0python

mlflow mlflowMatch2.12.1python

mlflow mlflowMatch2.12.2python

mlflow mlflowMatch2.13.0python

mlflow mlflowMatch2.13.1python

mlflow mlflowMatch2.13.2python

mlflow mlflowMatch2.14.0python

mlflow mlflowMatch2.14.0rc0python

mlflow mlflowMatch2.14.1python

mlflow mlflowMatch2.14.2python

mlflow mlflowMatch2.14.2.dev0python

mlflow mlflowMatch2.14.3python

mlflow mlflowMatch2.15.0python

mlflow mlflowMatch2.15.0rc0python

mlflow mlflowMatch2.15.1python

mlflow mlflowMatch2.16.0python

mlflow mlflowMatch2.16.1python

mlflow mlflowMatch2.2.0python

mlflow mlflowMatch2.2.1python

mlflow mlflowMatch2.2.2python

mlflow mlflowMatch2.3.0python

mlflow mlflowMatch2.3.1python

mlflow mlflowMatch2.3.2python

mlflow mlflowMatch2.4.0python

mlflow mlflowMatch2.4.1python

mlflow mlflowMatch2.4.2python

mlflow mlflowMatch2.5.0python

mlflow mlflowMatch2.6.0python

mlflow mlflowMatch2.7.0python

mlflow mlflowMatch2.7.1python

mlflow mlflowMatch2.8.0python

mlflow mlflowMatch2.8.1python

mlflow mlflowMatch2.9.0python

mlflow mlflowMatch2.9.1python

mlflow mlflowMatch2.9.2python

Source	Link
github	www.github.com/mlflow/mlflow/commit/7791b8cdd595f21b5f179c7b17e4b5eb5cbbe654
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8859
huntr	www.huntr.com/bounties/2259b88b-a0c6-4c7c-b434-6aacf6056dcb
github	www.github.com/mlflow/mlflow

13 Dec 2025 07:21Current

7High risk

Vulners AI Score7

CVSS 37.5

EPSS0.02769

SSVC