What’s Vulnerable › Vulnerabilities

CVE-2024-3573: Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow

• Severity: critical (CVSS 9.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-04-16 · updated 2026-06-17
• Weakness: CWE-29

Description

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.

Affected products

• mlflow/mlflow: before 2.10.0 — fixed in 2.10.0

How to fix

Upgrade to a fixed version: mlflow/mlflow 2.10.0. Check the vendor advisory for mitigations.

References

• https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc
• https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c
• https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc
• https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c

Get alerted when CVE-2024-3573 or the next vulnerability affects your stack