CVE-2025-15036

[CVE catalog]

Severity

Critical · CVSS 10

Published

Jan 1, 2025, 12:00:00 AM UTC

Source

[NVD] · [CVE record]

EPSS

0.58% · Oct 25, 2026

A flaw was found in mlflow. A path traversal vulnerability exists in the `extract_archive_to_dir` function, which is responsible for extracting archives. An attacker who can control the input tar.gz file can exploit this vulnerability due to insufficient validation of paths within the archive. This allows the attacker to overwrite arbitrary files, potentially leading to privilege escalation or escaping the intended sandbox environment in multi-tenant or shared cluster setups. mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation Important: A path traversal vulnerability exists in mlflow, specifically within the `extract_archive_to_dir` function. This flaw allows an attacker to overwrite arbitrary files and potentially escalate privileges or escape sandbox environments by providing a specially crafted `tar.gz` file. Red Hat OpenShift AI (RHOAI) is affected by this vulnerability. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.