MLflow versions prior to 3.11.0 contain a vulnerability involving insecure temporary file permissions that could lead to unauthorized local data access.

This is an insecure file permission issue (CWE-378) where temporary files are created with overly permissive access rights. Exploitation requires local access to the system (AV:L) and specific conditions regarding the local environment.

While the attack vector requires local access, successful exploitation could allow an attacker to read or modify sensitive temporary data, potentially leading to privilege escalation or the theft of credentials stored within the MLflow workspace. The CVSS score of 7.0 (High) reflects the potential for full compromise of the affected local environment.

Immediate Action: Update the MLflow package to version 3.11.0 or later to ensure temporary files are created with appropriate, restrictive system permissions.

Proactive Monitoring: Monitor local file system activity for unexpected file creation or access patterns within temporary directories used by MLflow services.

Compensating Controls: Implement strict OS-level access controls and ensure that the service runs with the least privilege necessary, minimizing the impact if a local attacker attempts to leverage insecure files.

Public Exploit Available: Unknown.

Administrators should prioritize updating to the patched version 3.11.0 to close this local security gap. Ensure that all systems running MLflow are hardened with appropriate file system permissions to further mitigate risk.