●PocketClawAI security alerts
Sign in
highCVSS 7.5NVD status: Analyzed

CVE-2024-3848

MLflow: A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909.

ComponentMLflow
Severityhigh (CVSS 7.5)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published (NVD)2024-05-16
Last modified2026-06-17
Affected versions
mlflow < 2.12.1
Fixed in2.12.1
WeaknessCWE-29CWE-22
CISA KEVnot listed

NVD description

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.

Does CVE-2024-3848 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for MLflow.
Check my stack

What to do

  • Upgrade MLflow to 2.12.1 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other MLflow CVEs

high
CVE-2026-96775CVSS 8.8

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends...

MLflow
2026-09-23high
CVE-2026-96804CVSS 8.8

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load...

MLflow
2026-09-23high
CVE-2026-79721CVSS 8.6

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to...

MLflow
2026-09-08critical
CVE-2026-64849CVSS 9.3

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior...

MLflow · exploited in the wild (CISA KEV)
2026-08-17high
CVE-2026-69148CVSS 7.1

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateMode...

MLflow
2026-08-17medium
CVE-2026-69146CVSS 6.5

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, L...

MLflow
2026-08-17

All MLflow CVEs