CVE-2023-1177

CVE-2023-1177 is a critical path traversal vulnerability affecting MLflow versions prior to 2.2.1, allowing attackers to access arbitrary files on the server. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While not yet in the KEV catalog, exploit intelligence indicates readily available Nuclei templates for critical local file inclusion, suggesting a high likelihood of exploitation. The vulnerability has garnered significant community attention and media coverage, highlighting its severe risk.