CVE-2025-15379

Katalog CVE

CVSS 10.0 · Critical EPSS 2,4%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada lfprojects mlflow. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency specifications from the model artifact's `python_env.yaml` file and directly interpolates them into a shell command without sanitization. This allows an attacker to supply a malicious model artifact and achieve arbitrary command execution on systems that deploy the model. The vulnerability affects versions 3.8.0 and is fixed in version 3.8.2.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

4 September 2026

Status NVD

Analyzed

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mlflow/mlflow/commit/361b6f620adf98385c6721e384fb5ef9a30bb05e patch
• https://huntr.com/bounties/dc9c1c20-7879-4050-87df-4d095fe5ca75 exploit · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2025-15379 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2452949 advisory pihak ketiga
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15379.json advisory pihak ketiga