GHSA-5p3h-7fwh-92rc

Remote Code Execution due to Full Controled File Write in mlflow

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-6018

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	mlflow	< 2.9.2	2.9.2

Details

As written in the advisory (Markdown source, shown as plain text).

The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-6018 advisory
https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd web
https://github.com/mlflow/mlflow package
https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30 web