CVE-2024-27134 json
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
published 2024-11-25 23 mo ago modified 2026-09-08 2 mo ago also BIT-mlflow-2024-27134 , EUVD-2024-0115 , GHSA-qpgc-w4mg-6v92 , PYSEC-2024-224
- cvss
- 7.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 1%
- public exploits
- 0
- none known
Summary
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
Patch / fix
- pypi mlflow 2.16.0
- bitnami mlflow 2.16.0
- lfprojects mlflow 2.16.0
- github.com/mlflow/mlflow@0b1d995 commit
- github.com/mlflow/mlflow#10874 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 23 mo ago
Exploit prediction
0.12% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | mlflow | <2.16.0 |
2.16.0 |
| bitnami | mlflow | <2.16.0 |
2.16.0 |
Affected products
- lfprojects mlflow
Classification
References
-
github.com
/mlflow/mlflow/pull/10874
patch, web, issue-tracking, report
-
github.com
/mlflow/mlflow/commit/0b1d995d66a678153e01ed3040f3f4dfc16a0d6b
web
-
nvd.nist.gov
/vuln/detail/CVE-2024-27134
advisory, web
-
github.com
/mlflow/mlflow
package
-
github.com
/advisories/GHSA-qpgc-w4mg-6v92
advisory
Sources
- CVE List CVE-2024-27134
- GitHub Advisory GHSA-qpgc-w4mg-6v92
- NVD CVE-2024-27134
- OSV BIT-mlflow-2024-27134
- OSV PYSEC-2024-224
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.