Database/AI/ML frameworks & serving
MLflow (`extract_archive_to_dir`): Path traversal in the dbconnect artifact cache
CVSS 10.0CVE-2025-15036AI/ML frameworks & servingcurated
Impact
Path traversal in the dbconnect artifact cache
Who can reach it
Customer-supplied artifact archive
What to do
Upgrade immediately — maximum severity
References
Related entries
- vLLM (Mooncake ZMQ/TCP): Unsafe deserialization exposed on all interfacesCVE-2025-32444 · vLLM (Mooncake ZMQ/TCP)Critical
- ChromaDB: Pre-authentication code injectionCVE-2026-45829 · ChromaDBCritical
- Kubeflow Pipelines frontend: unauthenticated SSRF proxy reaches cloud metadata and cluster-internal APIsCVE-2026-54745 · Kubeflow Pipelines frontend (/_proxy/ route in proxy-middleware.ts)Critical
- Xinference: unauthenticated chat request reaches eval() in the Llama3 tool-call parserCVE-2026-61539 · Xinference (Llama3 tool-call parser, `_eval_llama3_chat_arguments`)Critical
- Decepticon: unfiltered ChatML special tokens in crawl results give a target page control of the agentCVE-2026-61732 · Decepticon (LLM message construction from crawl output)Critical
- ClearML web server: XSSCVE-2024-24594 · ClearML web serverCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.