NIST · via Voidly Atlas
CVE-2026-53995
This is the agency's own public-domain data, curated and made citable by Voidly. Voidly adds no independent claim — always verify against the linked canonical source.
cve id
CVE-2026-53995
published
2026-10-19T22:17:11.013
last modified
2026-10-19T22:17:11.013
status
Received
description
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit FileStore.start_trace() to write trace_info.yaml, request_metadata, and tag files with attacker-controlled metadata outside the intended experiment trace directory, subject to the server process's filesystem permissions. FileStore is the default tracking backend before MLflow 3.7.0 and opt-in thereafter (the default changed to a SQLite database), so deployments in the earlier part of the affected range are vulnerable without special configuration while later ones are affected only when FileStore is explicitly selected.
cvss score
8.2
cvss severity
HIGH
cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
cwes
CWE-22
cpe count
0
Cite this record
Cite this record
CVE-2026-53995 — HIGH. NIST, via Voidly Atlas — Surveillance & Digital-Rights Watch. Retrieved 2026-10-20, https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-53995
@misc{voidly_nvd_cves_CVE202653995,
title = {CVE-2026-53995 — HIGH},
author = {{Voidly}},
howpublished = {\url{https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-53995}},
note = {Source: NIST National Vulnerability Database, https://nvd.nist.gov/vuln/detail/CVE-2026-53995. Public domain (17 U.S.C. §105); re-surfaced under CC BY 4.0},
urldate = {2026-10-20},
year = {2026}
}Also available as JSON/BibTeX/APA: API record. Source data is U.S. federal public domain (17 U.S.C. §105). Re-surfaced by Voidly under CC BY 4.0.