CVE-2026-4137
- Source
- https://cve.org/CVERecord?id=CVE-2026-4137
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-4137.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-4137
- Aliases
- Downstream
- Published
- 2026-05-18T20:26:23.104Z
- Modified
- 2026-07-27T03:56:19.283810264Z
- Severity
-
- 7.0 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
- Details
-
In mlflow/mlflow versions prior to 3.11.0, the
get_or_create_nfs_tmp_dir()function inmlflow/utils/file_utils.pycreates temporary directories with world-writable permissions (0o777), and the_create_model_downloading_tmp_dir()function inmlflow/pyfunc/__init__.pycreates directories with group-writable permissions (0o770). These insecure permissions allow local attackers to tamper with model artifacts, such as cloudpickle-serialized Python objects, and achieve arbitrary code execution when the tampered artifacts are deserialized viacloudpickle.load(). This vulnerability is particularly critical in environments with shared NFS mounts, such as Databricks, where NFS is enabled by default. The issue is a continuation of the vulnerability class addressed in CVE-2025-10279, which was only partially fixed. - Database specific
{ "cna_assigner": "@huntr_ai", "unresolved_ranges": [ { "extracted_events": [ { "fixed": "3.11.0" } ], "source": "AFFECTED_FIELD" } ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4137.json", "cwe_ids": [ "CWE-378" ] }- References