CVE-2025-10279

Katalog CVE

CVSS 7.0 · High EPSS 0,24%

Kerentanan Creation of Temporary File in Directory with Insecure Permissions pada lfprojects mlflow. Skor CVSS 3.0 7.0 (High) menurut huntr.dev.

Deskripsi (NVD)

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race condition and overwrite `.py` files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.

Rincian

Terbit di NVD

2 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.0

7.0 (High), sumber huntr.dev
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-379: Creation of Temporary File in Directory with Insecure Permissions

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mlflow/mlflow/commit/1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a patch
• https://huntr.com/bounties/01d3b81e-13d1-43aa-b91a-443aec68bdc8 exploit · advisory pihak ketiga