{"data":{"id":"75b46f6c-5146-4b21-bd5e-da1f79969db0","title":"CVE-2026-2033: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability…","summary":"CVE-2026-2033 is a directory traversal flaw in the artifact file path handling of the MLflow Tracking Server, leading to remote code execution. Remote attackers can exploit it without authentication, executing code in the context of the service account. The issue stems from missing validation of a user-supplied path before it is used in file operations.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-2033","publishedAt":"2026-02-20T23:16:03.093Z","cveId":"CVE-2026-2033","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.8.0rc0 (fixed: 3.8.0rc0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow Tracking Server directory traversal in artifact handler file paths","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01847,"epssCheckedAt":"2026-11-04T12:08:33.171Z","kevDateAdded":null,"advisoryAliases":["GHSA-q2r8-vmq7-fpx2"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:47.355Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-15T06:29:11.344Z","daysToFix":-67,"fixCheckedAt":"2026-10-29T21:40:42.344Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.8.0rc0","matchedVersion":"3.8.0rc0","fixReleasedAt":"2025-12-15T06:29:11.344Z","daysToFix":-67,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:42.188Z"}]}}