CVE-2025-10279: Lfprojects MLflow

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race condition and overwrite `.py` files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.

Affected products

• Lfprojects MLflow: before 3.4.0 (fixed in 3.4.0)

Published 2026-02-02. Last modified 2026-06-17.