ML
Product
mlflow
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 4High 10Medium 5Low 1
Watch
Add mlflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116691 New | 6.5 | Oct 27 | MLflow CrewAI autologging records LLM provider API keys in logged trace spans Affected: >= 2.19.0, < 3.17.0 |
| CVE-2026-115886 New | 6.5 | Oct 23 | MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints Affected: >= 3.12.0rc0, < 3.17.0 |
| CVE-2026-69146 | 6.5 | Aug 17 | MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth Affected: < 3.15.0 |
| CVE-2026-33865 | 5.4 | Apr 7 | Stored XSS via unsafe YAML parsing in MLflow Affected: through 3.10.1 |
| CVE-2026-33866 | 4.3 | Apr 7 | Authorization Bypass in MLflow AJAX Endpoint Affected: through 3.10.1 |
Showing 5