CVE-2025-15031

CriticalCVSS 9.1/10Last modified Jul 15, 2026

Description

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
mlflow	mlflow/mlflow	>= unspecified, <= latest
Red Hat	Red Hat OpenShift AI (RHOAI)	—

References

https://huntr.com/bounties/09856f77-f968-446f-a930-657d126efe4eExploit, Mitigation, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-15031
https://bugzilla.redhat.com/show_bug.cgi?id=2448912
https://huntr.com/bounties/09856f77-f968-446f-a930-657d126efe4eExploit, Mitigation, Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15031.json

Timeline

Published: Mar 18, 2026
Last modified: Jul 15, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-150327.4Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in CVE-2025-150336.5A vulnerability in WooCommerce 8.1 to 10.4.2 can allow logged-in customers to access order data of guest customers on sites with a certain c CVE-2025-150349.8A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The CVE-2025-150357.3Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 (vpn modules) allows an authenticated adjacent attacker to delete arbit CVE-2025-1503610.0A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file o CVE-2025-150376.8An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be trig CVE-2025-150386.9An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an u CVE-2025-150399.4The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication ste CVE-2025-15046.5The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocom CVE-2025-150417.2The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to pr CVE-2025-150435.4The The Events Calendar plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'start_migration'CVE-2025-150449.8A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetting. The manipulation