{"id":"CVE-2025-10279","aliases":["GHSA-4x5p-f36r-mxxr","BIT-mlflow-2025-10279","PYSEC-2026-1639"],"title":"mlflow Creates of Temporary File in Directory with Insecure Permissions","summary":"mlflow Creates of Temporary File in Directory with Insecure Permissions","severity":"high","cvss":7,"cvssVector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"mlflow","product":"mlflow","ecosystem":"pip","affected":["mlflow < 3.4.0rc0"],"patched":["mlflow 3.4.0rc0"],"published":"2026-02-02","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:34.192729513Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-4x5p-f36r-mxxr","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10279"},{"url":"https://github.com/mlflow/mlflow/commit/1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a"},{"url":"https://github.com/mlflow/mlflow"},{"url":"https://huntr.com/bounties/01d3b81e-13d1-43aa-b91a-443aec68bdc8"}],"tags":["osv","pip"],"epss":0.00228,"epssPercentile":0.13853,"ingestedAt":"2026-07-08T18:25:45.719Z","slug":"CVE-2025-10279","body":"## Overview\n\nIn mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race condition and overwrite `.py` files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.\n\n## Affected packages\n\n- `mlflow < 3.4.0rc0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `mlflow 3.4.0rc0`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}