References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected].
Change History
4 change records found show changes
CVE Modified by CISA-ADP
6/17/2026 4:29:50 AM
| Action |
Type |
Old Value |
New Value |
| Added |
SSVC |
|
{"timestamp":"2025-10-31T03:55:31.647703Z","id":"CVE-2025-11201","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}
|
CVE Modified by Zero Day Initiative
6/17/2026 4:29:50 AM
| Action |
Type |
Old Value |
New Value |
| Added |
Affected |
|
[{"vendor":"MLflow","product":"MLflow","defaultStatus":"unknown","versions":[{"version":"2.21.3","status":"affected"}]}]
|
Initial Analysis by NIST
11/04/2025 4:22:41 PM
| Action |
Type |
Old Value |
New Value |
| Added |
CVSS V3.1 |
|
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| Added |
CPE Configuration |
|
OR
*cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* versions up to (excluding) 2025-06-10
|
| Added |
Reference Type |
|
Zero Day Initiative: https://github.com/B-Step62/mlflow/commit/2e02bc7bb70df243e6eb792689d9b8eba0013161 Types: Patch
|
| Added |
Reference Type |
|
Zero Day Initiative: https://www.zerodayinitiative.com/advisories/ZDI-25-931/ Types: Third Party Advisory
|
New CVE Received from Zero Day Initiative
10/29/2025 4:15:35 PM
| Action |
Type |
Old Value |
New Value |
| Added |
Description |
|
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.
|
| Added |
CVSS V3 |
|
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| Added |
CWE |
|
CWE-22
|
| Added |
Reference |
|
https://github.com/B-Step62/mlflow/commit/2e02bc7bb70df243e6eb792689d9b8eba0013161
|
| Added |
Reference |
|
https://www.zerodayinitiative.com/advisories/ZDI-25-931/
|