Review reviewHigh

CVE-2025-14287

mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The issue affects environments where MLflow is used, including development setups, CI/CD pipelines, and cloud deployments.

CVSS: 8.8
EPSS: 1.46%
CISA KEV: Not listed
Published: 2026.03.16

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability1.46%

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow
Affected versions: >= unspecified <= latest, < 3.7.0
Fixed versions: 3.7.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-78, CWE-94