SaiTeja-Erukude/CVE-2026-53995-mlflow-path-traversal

PoC

MLflow <=3.17.1 path traversal allows trace file writes outside the intended directory.

view exploit source poc_in_githubauthor SaiTeja-Erukudepublished 2026-10-17catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-53995US	high8.2	0.56% (46th)	Exploit	2026-10-19
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.