●PocketClawAI security alerts
Sign in
highCVSS 8.8NVD status: Modified

CVE-2025-14287

MLflow: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167.

ComponentMLflow
Severityhigh (CVSS 8.8)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published (NVD)2026-03-16
Last modified2026-07-15
Affected versions
mlflow < 3.7.0
Fixed in3.7.0
WeaknessCWE-94CWE-78
CISA KEVnot listed

NVD description

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The issue affects environments where MLflow is used, including development setups, CI/CD pipelines, and cloud deployments.

Does CVE-2025-14287 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for MLflow.
Check my stack

What to do

  • Upgrade MLflow to 3.7.0 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other MLflow CVEs

high
CVE-2026-96775CVSS 8.8

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends...

MLflow
2026-09-23high
CVE-2026-96804CVSS 8.8

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load...

MLflow
2026-09-23high
CVE-2026-79721CVSS 8.6

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to...

MLflow
2026-09-08critical
CVE-2026-64849CVSS 9.3

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior...

MLflow · exploited in the wild (CISA KEV)
2026-08-17high
CVE-2026-69148CVSS 7.1

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateMode...

MLflow
2026-08-17medium
CVE-2026-69146CVSS 6.5

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, L...

MLflow
2026-08-17

All MLflow CVEs