Critical 9.6Published Mar 29, 2026

CVE-2025-15036Path Traversal Vulnerability in mlflow/mlflow

Updated under an hour ago (Oct 26, 2026, 11:50 PM ET)

Does this affect you?

It affects mlflow/mlflow and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for mlflow/mlflow

Exploited in the last 30 days

A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.

CVSS: 9.6 CRITICAL (v3.0, CNA)CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-29, CWE-22
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: @huntr_ai
NVD analysis: Modified
Record last updated: Jul 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

mlflow mlflow/mlflow mlflow:mlflow (from the name)	from unspecified before 3.9.0	CNA record
Red Hat Red Hat OpenShift AI (RHOAI) redhat:openshift_ai	All versions	CISA ADP
lfprojects mlflow lfprojects:mlflow	before 3.9.0	NVD

References

References

https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0	exploit, third-party-advisory
https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346	patch
https://access.redhat.com/security/cve/CVE-2025-15036
https://bugzilla.redhat.com/show_bug.cgi?id=2452925
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15036.json

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.