Description
A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.
INFO
Published Date :
2026-03-18T22:06:47.300Z
Last Modified :
2026-03-19T13:52:40.477Z
Source :
@huntr_ai
AFFECTED PRODUCTS
The following products are affected by CVE-2025-15031 vulnerability.
| Vendors | Products |
|---|---|
| Lfprojects |
|
| Mlflow |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-15031.
