-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| mlflow | pip | < 2.16.0 | 2.16.0 |
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from the directory permission change in _create_model_downloading_tmp_dir() shown in the commit diff. The original 0o777 permissions allowed any local user to modify the temporary model directory. When combined with Spark UDF execution timing, this created a race condition window for privilege escalation. The patch explicitly reduces permissions to 0o770 to mitigate this. The function's direct involvement in Spark UDF workflows and the security-focused nature of the permission change confirm its role in the vulnerability.
Ongoing coverage of React2Shell