Incorrect Default Permissions

Summary

Excessive directory permissions in MLflow leads to Local Privilege Escalation when using "spark_udf". This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU (Time-of-Check to Time-of-Use) attack. The issue is only relevant when the "spark_udf()" MLflow API is called. This issue affects versions before 2.16.0.