Arbitrary File Read Access Vulnerability in mlflow/mlflow

CVE-2024-1558

Summary

A path traversal vulnerability exists in the _create_model_version() function within server/handlers.py of the MLflow repository, caused by inadequate validation of the source parameter. This flaw enables attackers to exploit crafted source input, circumventing the _validate_non_local_source_contains_relative_paths(source) function's checks. As a result, unauthorized access to arbitrary files on the server can occur, exposing sensitive data while interacting with the /model-versions/get-artifact handler. Proper security measures and updates are required to mitigate this risk.

References