ZeroDay Findings
Sign inSign up

Findings

CVE-2026-4137

In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directori…

Published May 18, 2026 · updated Jul 24, 2026 · lfprojects mlflow

In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directories with group-writable permissions (0o770). These insecure permissions allow local attackers to tamper with model artifacts, such as cloudpickle-serialized Python objects, and achieve arbitrary code execution when the tampered artifacts are deserialized via . This vulnerability is particularly critical in environments with shared NFS mounts, such as Databricks, where NFS is enabled by default. The issue is a continuation of the vulnerability class addressed in CVE-2025-10279, which was only partially fixed.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 18, 2026 · NIST NVD

    Detected

    In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directories with group-writable permissions (0o770). These insecure permissions allow local attackers to tamper with model artifacts, such as cloudpickle-serialized Python objects, and achieve arbitrary code execution when the tampered artifa

  2. Jul 24, 2026 · NIST NVD

    Updated

    In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directories with group-writable permissions (0o770). These insecure permissions allow local attackers to tamper with model artifacts, such as cloudpickle-serialized Python objects, and achieve arbitrary code execution when the tampered artifa

Affected

  • cpe lfprojects/mlflowversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-4137

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4137

    In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creat

    nvd.nist.gov

References