{"data":{"id":"c328deb8-9b1d-4d24-bac4-d6265fd4b460","title":"CVE-2025-14287: A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the…","summary":"CVE-2025-14287 is a command injection flaw in mlflow/mlflow versions before v3.7.0, located in `mlflow/sagemaker/__init__.py` at lines 161-167. User-supplied container image names are interpolated directly into shell commands and run through `os.system()` without sanitization, so an attacker can execute arbitrary commands by supplying malicious input via the `--container` CLI parameter.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14287","publishedAt":"2026-03-16T14:17:55.610Z","cveId":"CVE-2025-14287","cweIds":["CWE-94"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.8.0rc0 (fixed: 3.8.0rc0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow command injection through the container parameter in SageMaker CLI","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01515,"epssCheckedAt":"2026-11-04T18:09:13.116Z","kevDateAdded":null,"advisoryAliases":["GHSA-xch3-2f9x-wh9f"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:26.837Z","patchAvailable":true,"disclosureDate":"2026-03-16T14:17:55.610Z","fixReleasedAt":"2025-12-15T06:29:11.344Z","daysToFix":-91,"fixCheckedAt":"2026-10-29T21:39:53.097Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.8.0rc0","matchedVersion":"3.8.0rc0","fixReleasedAt":"2025-12-15T06:29:11.344Z","daysToFix":-91,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:39:52.950Z"}]}}