CVE-2025-10279: Privilege Escalation in mlflow/mlflow
In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the /tmp directory to exploit a race condition and overwrite .py files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10279?
CVE-2025-10279 is classified as a privilege escalation vulnerability due to insecure world-writable permissions.
How do I fix CVE-2025-10279?
To fix CVE-2025-10279, ensure the temporary directory used for creating Python virtual environments has secure permissions set to prevent unauthorized access.
Who is affected by CVE-2025-10279?
CVE-2025-10279 affects users of mlflow versions up to and including 2.20.3.
What causes CVE-2025-10279?
CVE-2025-10279 is caused by the temporary directory created for Python virtual environments being assigned insecure permissions (0o777).
Can CVE-2025-10279 be exploited remotely?
CVE-2025-10279 requires local write access to the /tmp directory, therefore it is not a remote exploit.