ML
Product
mlflow
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 2High 10Medium 5Low 1
Watch
Add mlflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96804 | 8.8 | Sep 23 | No description published yet Affected: 2.1 before 3.15.0 |
| CVE-2026-96775 | 8.8 | Sep 23 | MLflow dspy bypasses pickle deserialization control Affected: 2.0 |
| CVE-2026-13484 | 8.8 | Jun 28 | MLflow Experiment-scoped Label Schema CRUD API authorization Affected: 4666cffc7912ea606d592fc38d6a75e2935f65e7 |
| CVE-2026-79721 | 8.6 | Sep 8 | Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end… Affected: 0.0.1 |
| CVE-2026-53995 | 8.2 | Oct 19 | MLflow 3.17.1 and prior Path Traversal via Trace ID API Affected: through 3.17.1 |
| CVE-2026-116690 New | 7.5 | Oct 27 | MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source Affected: >= 3.10.0, < 3.17.0 |
| CVE-2026-2635 | 7.3 | Feb 20 | MLflow Use of Default Password Authentication Bypass Vulnerability Affected: 3.4.0 |
| CVE-2026-2033 | 7.3 | Feb 20 | MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability Affected: 3.1.1 and 5b9c01925c2e2a8cf0951f155a6a468ff99cfe0f |
| CVE-2026-69148 | 7.1 | Aug 17 | MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id Affected: < 3.15.0 |
| CVE-2026-71211 | 7.1 | Aug 5 | mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint Affected: through 3.14.0 |
Showing 10