CVE-2025-15031: Lfprojects MLflow

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.

Affected products

• Lfprojects MLflow: up to and including 3.10.1

Published 2026-03-18. Last modified 2026-07-15.