CVE-2024-1594: Local File Read via Path Traversal in mlflow/mlflow

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-04-16 · updated 2026-06-17
Weakness: CWE-22

Description

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.

Affected products

mlflow/mlflow: before 2.11.3 — fixed in 2.11.3

How to fix

Upgrade to a fixed version: mlflow/mlflow 2.11.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-1594 or the next vulnerability affects your stack