CVE-2024-27134 json
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
published last yr. modified 2mo ago also BIT-mlflow-2024-27134 , EUVD-2024-0115 , GHSA-qpgc-w4mg-6v92 , PYSEC-2024-224
- cvss
- 7.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 1%
- public exploits
- 0
- none known
Summary
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
Patch / fix
- pypi mlflow 2.16.0
- bitnami mlflow 2.16.0
- lfprojects mlflow 2.16.0
- github.com/mlflow/mlflow@0b1d995 commit
- github.com/mlflow/mlflow#10874 pull request
Is CVE-2024-27134 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- last yr.
Exploit prediction
0.12% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-11).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | mlflow | <2.16.0 |
2.16.0 |
| bitnami | mlflow | <2.16.0 |
2.16.0 |
Affected products
- lfprojects mlflow
Classification
References
-
github.com
/mlflow/mlflow/pull/10874
patch, web, issue-tracking, report
-
github.com
/mlflow/mlflow/commit/0b1d995d66a678153e01ed3040f3f4dfc16a0d6b
web
-
nvd.nist.gov
/vuln/detail/CVE-2024-27134
advisory, web
-
github.com
/mlflow/mlflow
package
-
github.com
/advisories/GHSA-qpgc-w4mg-6v92
advisory
Sources
- CVE List CVE-2024-27134
- GitHub Advisory GHSA-qpgc-w4mg-6v92
- NVD CVE-2024-27134
- OSV BIT-mlflow-2024-27134
- OSV PYSEC-2024-224
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.