CVE-2025-14287
Description
A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The issue affects environments where MLflow is used, including development setups, CI/CD pipelines, and cloud deployments.
How to fix
- lfprojects mlflow3.7.0 or later
- mlflow3.8.0rc0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lfprojects mlflow | v < 3.7.0 | 3.7.0 |
| mlflowPyPI | v < 3.8.0rc0 | 3.8.0rc0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.