{"data":{"id":"56c93900-2621-4b40-b64c-1fc79887bb11","title":"CVE-2024-3573: mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass…","summary":"CVE-2024-3573 affects mlflow/mlflow, where improper URI parsing enables Local File Inclusion. The 'is_local_uri' function misclassifies URIs with empty or 'file' schemes as non-local, so an attacker who crafts a malicious model version with a specially crafted 'source' parameter can read arbitrary files, including sensitive files at least two directory levels from the server's root.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3573","publishedAt":"2024-04-16T04:15:12.570Z","cveId":"CVE-2024-3573","cweIds":["CWE-29","CWE-22"],"cvssScore":"9.3","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@< 2.10.0 (fixed: 2.10.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mlflow/mlflow local file inclusion through improper URI parsing","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00733,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-hq88-wg7q-gp4g"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:11.174Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-01-26T04:40:49.197Z","daysToFix":-81,"fixCheckedAt":"2026-10-29T21:46:06.944Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"2.10.0","matchedVersion":"2.10.0","fixReleasedAt":"2024-01-26T04:40:49.197Z","daysToFix":-81,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:06.791Z"}]}}