Threats Tagged 'cve-2025-15036'
View all threats tagged with 'cve-2025-15036'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-15036'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-15036: CWE-29 Path Traversal: '\..\filename' in mlflow mlflow/mlflowCVE-2025-15036 0 CVE-2025-15036 is a critical path traversal vulnerability in the mlflow/mlflow project affecting versions prior to v3. 7. 0. It exists in the extract_archive_to_dir function due to improper validation of tar archive member paths during extraction. An attacker controlling a crafted tar. gz file can exploit this to overwrite arbitrary files outside the intended directory, potentially escaping sandbox restrictions in shared or multi-tenant environments. This can lead to full system compromise, including elevated privileges and data integrity loss. Join the discussion | CVE Database V5 | 03/30/2026, 01:16:06 UTC Added: 03/30/2026, 01:38:16 UTC |
Showing 1 to 1 of 1 result