CVE-2023-6018: MLflow Arbitrary File Write
An attacker can overwrite any file on the server hosting MLflow without any authentication.
Other sources
The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting /home/<user>/.bashrc). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-6018?
CVE-2023-6018 is a vulnerability that allows an attacker to write or overwrite any file on the file system.
What software is affected by CVE-2023-6018?
The mlflow package with version up to and including 2.8.1 and Lfprojects Mlflow are affected by CVE-2023-6018.
How severe is CVE-2023-6018?
CVE-2023-6018 has a severity level of critical, with a severity value of 10.
How can CVE-2023-6018 be exploited?
Exploiting CVE-2023-6018 allows an attacker to execute arbitrary code by overwriting files.
How can I fix CVE-2023-6018?
To fix CVE-2023-6018, update the mlflow package to a version higher than 2.8.1 or apply any available patches or security updates provided by the vendor.