CVE-2026-53995 | MLflow up to 3.17.1 FileStore trace_info.yaml FileStore.start_trace trace_id path traversal

October 20, 2026 Yanac

A vulnerability classified as critical has been found in MLflow up to 3.17.1. Affected is the function FileStore.start_trace of the file trace_info.yaml of the component FileStore. This manipulation of the argument trace_id causes path traversal.

This vulnerability is registered as CVE-2026-53995. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More