CVE-2024-27134
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.
HIGH · CVSS 7
EPSS 0.0003
Schedule remediation
- CVSS base score ≥ 7.0
Sigma rules0
YARA rules0