MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
影響: pip:mlflow >= 3.10.0, < 3.17.0 → 3.17.0
On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in 3.10.0 added a prompt-specific branch to the CreateModelVersion handler that rejects file:// URIs and absolute paths but runs path validation only when the source carries a URL scheme. A schemeless value such as…
| CVE | CVE-2026-116690 |
|---|---|
| 정보원 | GitHub Advisory Database |
| 수집 시각 | 2026. 10. 28. 오전 06:27 |
| 데이터 | Markdown JSON |
2026. 10. 28. 오전 06:26, GitHub Advisory Database에서 "MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python. CVE: CVE-2026-116690.