CVE-2026-2033 describes a critical directory traversal vulnerability in MLflow Tracking Server's artifact handler, allowing unauthenticated remote attackers to execute arbitrary code. This flaw stems from insufficient validation of user-supplied file paths, enabling an attacker to execute code with the privileges of the service account. Rated 8.1 HIGH on CVSS, it presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. While there is no public exploit code or active exploitation confirmed, the vulnerability has garnered substantial community discussion, indicating awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| MLflow | MLflow | 3.1.1 and 5b9c01925c2e2a8cf0951f155a6a468ff99cfe0fCNA affecteddefault unknown |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.