CVE-2026-127202 | MLflow up to 3.17.x FileStore model_id path traversal

A vulnerability categorized as problematic has been discovered in MLflow up to 3.17.x. This affects an unknown part of the component FileStore. The manipulation of the argument model_id results in path traversal.

This vulnerability is identified as CVE-2026-127202. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More