●PocketClawAI security alerts
Sign in
criticalCVSS 9.3NVD status: Analyzed

CVE-2024-3573

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system.

ComponentMLflow
Severitycritical (CVSS 9.3)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Published (NVD)2024-04-16
Last modified2026-06-17
Affected versions
mlflow < 2.10.0
Fixed in2.10.0
WeaknessCWE-29CWE-22
CISA KEVnot listed

NVD description

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.

Does CVE-2024-3573 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for MLflow.
Check my stack

What to do

  • Upgrade MLflow to 2.10.0 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other MLflow CVEs

high
CVE-2026-96775CVSS 8.8

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends...

MLflow
2026-09-23high
CVE-2026-96804CVSS 8.8

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load...

MLflow
2026-09-23high
CVE-2026-79721CVSS 8.6

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to...

MLflow
2026-09-08critical
CVE-2026-64849CVSS 9.3

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior...

MLflow · exploited in the wild (CISA KEV)
2026-08-17high
CVE-2026-69148CVSS 7.1

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateMode...

MLflow
2026-08-17medium
CVE-2026-69146CVSS 6.5

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, L...

MLflow
2026-08-17

All MLflow CVEs