Directory Traversal Vulnerability in MLflow Tracking Server
CVE-2025-11201

8.1HIGH

Key Information:

Vendor

Mlflow

Status
Mlflow
Vendor
CVE Published:
29 October 2025

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 26%

What is CVE-2025-11201?

A vulnerability exists in MLflow Tracking Server that allows remote attackers to exploit improper validation in model file paths. This oversight can lead to directory traversal attacks, enabling malicious users to execute arbitrary code within the context of the service account. Importantly, this vulnerability can be exploited without authentication, elevating the risk to affected installations. Administrators should take immediate steps to apply the necessary security patch to protect their systems from potential exploits.

Affected Version(s)

MLflow 2.21.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

POC-CVE-2025-11201
Created by rmhowe425

References

https://www.zerodayinitiative.com/advisories/ZDI-25-931/
x_research-advisory
https://github.com/B-Step62/mlflow/commit/2e02bc7bb70df24...
vendor-advisory

EPSS Score

26% chance of being exploited in the next 30 days.

CVSS V3.0

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.