{"data":{"id":"0d1aaf56-b6e4-4081-b641-b1b8e9d89dc9","title":"CVE-2025-15379: A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the…","summary":"A command injection flaw in MLflow's model serving container initialization, in the `_install_model_dependencies_to_env()` function, affects version 3.8.0. When a model is deployed with `env_manager=LOCAL`, dependency specifications read from the artifact's `python_env.yaml` are interpolated into a shell command without sanitization. An attacker who supplies a malicious model artifact can achieve arbitrary command execution on systems that deploy it.","solution":"Fixed in version 3.8.2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-15379","publishedAt":"2026-03-30T08:16:15.667Z","cveId":"CVE-2025-15379","cweIds":["CWE-77"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.8.1 (fixed: 3.8.1)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow command injection in model serving dependency installation","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.02401,"epssCheckedAt":"2026-11-12T15:03:09.675Z","kevDateAdded":null,"advisoryAliases":["GHSA-r23q-823p-vmf7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:05.605Z","patchAvailable":true,"disclosureDate":"2026-03-30T08:16:15.667Z","fixReleasedAt":"2025-12-26T16:46:46.528Z","daysToFix":-94,"fixCheckedAt":"2026-10-29T21:39:18.458Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.8.1","matchedVersion":"3.8.1","fixReleasedAt":"2025-12-26T16:46:46.528Z","daysToFix":-94,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:18.314Z"}]}}