ZeroDay Findings
Sign inSign up

Findings

CVE-2025-15031

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries.

Published Mar 18, 2026 · updated Jul 15, 2026 · lfprojects mlflow

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of without path validation enables crafted tar.gz files containing or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2026 · NIST NVD

    Detected

    A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of without path validation enables crafted tar.gz files containing or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tena

  2. Jul 15, 2026 · NIST NVD

    Updated

    A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of without path validation enables crafted tar.gz files containing or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tena

Affected

  • cpe lfprojects/mlflowversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-15031

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-15031

    A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of without path validation enables crafted tar.gz files containing or absolute paths to escape t

    nvd.nist.gov

References