MediumVulnerability
CVE-2026-127202: MLflow path traversal through model_id in the log outputs API
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-127202
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
MLflow before 3.18.0 using the FileStore backend contains a path traversal flaw in the log outputs API. Unauthenticated remote attackers can send a malicious model_id containing ../ sequences to POST /api/3.0/mlflow/runs/outputs, creating directories and writing a meta.yaml file at arbitrary filesystem locations, limited only by the server account's permissions. FileStore was the default backend before 3.7.0 and is opt-in afterward through MLFLOW_ALLOW_FILE_STORE.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
- MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
- MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database
- MediumAI found Linux kernel bugs that remained undetected for decadesSimilar attack · CSO Online