CVE-2024-1560 Path Traversal Vulnerability in mlflow/mlflow
Attackers can delete arbitrary directories on the server filesystem by exploiting path traversal in MLflow's artifact deletion handler.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-1560?
CVE-2024-1560 is a high-severity path traversal vulnerability in Lfprojects Mlflow, published on 16 Apr 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and `local_file_uri_to_path` function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the `delete_artifacts` function of `local_artifact_repo.py`, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.
Weakness: CWE-22
Which versions are affected by CVE-2024-1560?
4 open source packages ship an affected version, including mlflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mlflow Bitnami | All versions | 2.12.2 |
mlflow PyPI | All versions to 2.9.2 | None |
mlflow PyPI | All versions to 2.9.2 | None |
mlflow PyPI | All versions to 2.9.2 | None |
Products include Lfprojects Mlflow.
How do I fix CVE-2024-1560?
Upgrade mlflow to 2.12.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-1560 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-1560 exists.
Other vulnerabilities in Lfprojects Mlflow
- CVE-2026-64849 MLflow Server-Side Request Forgery
- CVE-2025-15379 Command Injection in mlflow/mlflow
- CVE-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow
- CVE-2023-6977 Path Traversal: '\..\filename'
- CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow
Sources
Also known as BIT-mlflow-2024-1560, GHSA-5mvj-wmgj-7q8c, PYSEC-2026-1641.