Command Injection Vulnerability in MLflow Model Serving
CVE-2025-15379
What is CVE-2025-15379?
A command injection vulnerability has been identified in MLflow's model serving container initialization code, specifically within the _install_model_dependencies_to_env() function. The issue arises when deploying a model using env_manager=LOCAL, as MLflow reads dependency specifications from the model artifact's python_env.yaml file and directly embeds them into a shell command without appropriate sanitization. This oversight allows an attacker to introduce a malicious model artifact that can lead to arbitrary command execution on systems utilizing the model, posing significant security risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
mlflow/mlflow < 3.8.2