●PocketClawAI security alerts
Sign in
criticalCVSS 9.8NVD status: Analyzed

CVE-2025-11201

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability.

ComponentMLflow
Severitycritical (CVSS 9.8)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published (NVD)2025-10-29
Last modified2026-06-17
Affected versions
mlflow < 2025-06-10
Fixed in2025-06-10
WeaknessCWE-22
CISA KEVnot listed

NVD description

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.

Does CVE-2025-11201 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for MLflow.
Check my stack

What to do

  • Upgrade MLflow to 2025-06-10 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other MLflow CVEs

high
CVE-2026-96775CVSS 8.8

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends...

MLflow
2026-09-23high
CVE-2026-96804CVSS 8.8

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load...

MLflow
2026-09-23high
CVE-2026-79721CVSS 8.6

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to...

MLflow
2026-09-08critical
CVE-2026-64849CVSS 9.3

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior...

MLflow · exploited in the wild (CISA KEV)
2026-08-17high
CVE-2026-69148CVSS 7.1

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateMode...

MLflow
2026-08-17medium
CVE-2026-69146CVSS 6.5

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, L...

MLflow
2026-08-17

All MLflow CVEs