MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules

No description published yet

MLflow dspy bypasses pickle deserialization control

MLflow Experiment-scoped Label Schema CRUD API authorization

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end…

MLflow 3.17.1 and prior Path Traversal via Trace ID API

MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source

MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

Stored XSS via unsafe YAML parsing in MLflow

Authorization Bypass in MLflow AJAX Endpoint

MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash