An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
                    
                    
                        An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.