Language: Python
Label: vulnerable
CWE: CWE-29 \u2014 Path Traversal: '\..\filename'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\..\filename' (leading backslash dot dot) sequences that can resolve to a location that is outside of that directory.

Code:
def test_list_artifacts_malicious_path(http_artifact_repo, path):
    with mock.patch(
        "mlflow.store.artifact.http_artifact_repo.http_request",
        return_value=MockResponse(
            {
                "files": [
                    {"path": path, "is_dir": False, "file_size": 1},
                ]
            },
            200,
        ),
    ):
        with pytest.raises(MlflowException, match=f"Invalid path: {path}"):
            http_artifact_repo.list_artifacts()