{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15036.json" } ], "title": "mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation", "tracking": { "current_release_date": "2026-06-30T04:09:33+00:00", "generator": { "date": "2026-06-30T04:09:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2025-15036", "initial_release_date": "2025-01-01T00:00:00+00:00", "revision_history": [ { "date": "2025-01-01T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-04-28T14:30:07+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T04:09:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)", "product": { "name": "Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai)", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "category": "product_version", "name": "rhoai/odh-mlflow-rhel9", "product": { "name": "rhoai/odh-mlflow-rhel9", "product_id": "rhoai/odh-mlflow-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product": { "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product_id": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-training-cuda128-torch29-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9" }, "product_reference": "rhoai/odh-mlflow-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" }, "product_reference": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-15036", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "discovery_date": "2026-03-30T02:01:17.426087+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2452925" } ], "notes": [ { "category": "description", "text": "A flaw was found in mlflow. A path traversal vulnerability exists in the `extract_archive_to_dir` function, which is responsible for extracting archives. An attacker who can control the input tar.gz file can exploit this vulnerability due to insufficient validation of paths within the archive. This allows the attacker to overwrite arbitrary files, potentially leading to privilege escalation or escaping the intended sandbox environment in multi-tenant or shared cluster setups.", "title": "Vulnerability description" }, { "category": "summary", "text": "mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation", "title": "Vulnerability summary" }, { "category": "other", "text": "Important: A path traversal vulnerability exists in mlflow, specifically within the `extract_archive_to_dir` function. This flaw allows an attacker to overwrite arbitrary files and potentially escalate privileges or escape sandbox environments by providing a specially crafted `tar.gz` file. Red Hat OpenShift AI (RHOAI) is affected by this vulnerability.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9" ], "known_not_affected": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-15036" }, { "category": "external", "summary": "RHBZ#2452925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452925" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-15036", "url": "https://www.cve.org/CVERecord?id=CVE-2025-15036" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15036", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15036" }, { "category": "external", "summary": "https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346", "url": "https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346" }, { "category": "external", "summary": "https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0", "url": "https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0" } ], "release_date": "2026-03-30T01:16:06.400000+00:00", "remediations": [ { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "title": "mlflow: mlflow: Path traversal vulnerability allows arbitrary file overwrite and privilege escalation" } ] }