CVE Description

CVE Description: MLflow versions 1.0.0 through 2.9.1 are vulnerable to an authenticated path traversal attack via the GET /api/2.0/mlflow/model-versions/get-artifact endpoint, where the path query parameter is passed to the filesystem without sanitisation, allowing an attacker with valid credentials to read arbitrary files outside the intended artifact directory. An attacker can bypass input validation by URL-encoding the path separator (e.g. ..%2F or ..%252F), enabling retrieval of sensitive files such as /etc/passwd or application secrets from the host running the MLflow tracking server.

Impacted Versions: MLFlow versions 1.0.0 thorugh 2.9.1

Auxiliary Module

flowhound scan --url http://192.168.1.30:5000 --username admin --password password --cve CVE-2024-27132 --f_path http://127.0.0.1:5000/version