ML
Vendor
mlflow
35
CVEs
1
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116692 New | ML mlflow mlflow | 9.8 | Oct 27 | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules |
| CVE-2026-116691 New | ML mlflow mlflow | 6.5 | Oct 27 | MLflow CrewAI autologging records LLM provider API keys in logged trace spans |
| CVE-2026-116690 New | ML mlflow mlflow | 7.5 | Oct 27 | MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source |
| CVE-2026-115886 New | ML mlflow mlflow | 6.5 | Oct 23 | MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints |
| CVE-2026-53995 | ML mlflow mlflow | 8.2 | Oct 19 | MLflow 3.17.1 and prior Path Traversal via Trace ID API |
| CVE-2026-96804 | ML MLflow MLflow | 8.8 | Sep 23 | No description published yet |
| CVE-2026-96775 | ML MLflow MLflow | 8.8 | Sep 23 | MLflow dspy bypasses pickle deserialization control |
| CVE-2026-79721 | ML mlflow mlflow | 8.6 | Sep 8 | Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end… |
| CVE-2026-69146 | ML mlflow mlflow | 6.5 | Aug 17 | MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth |
| CVE-2026-69148 | ML mlflow mlflow | 7.1 | Aug 17 | MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id |
| CVE-2026-64849 In wildKEV | ML mlflow mlflow | 9.3 | Aug 17 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) |
| CVE-2026-71211 | ML mlflow mlflow | 7.1 | Aug 5 | mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint |
| CVE-2026-8147 | ML mlflow/mlflow mlflow | 8.1 | Jul 2 | Authorization Bypass in mlflow/mlflow |
| CVE-2026-13484 | ML MLflow Mlflow | 8.8 | Jun 28 | MLflow Experiment-scoped Label Schema CRUD API authorization |
| CVE-2026-10803 | ML MLflow Mlflow | 3.6 | Jun 4 | MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash |
| CVE-2026-4035 | ML mlflow/mlflow mlflow | 7.7 | Jun 3 | Environment Variable Resolution Vulnerability in mlflow/mlflow |
| CVE-2026-3198 | ML mlflow/mlflow mlflow | 6.5 | Jun 2 | Improper Access Control in mlflow/mlflow |
| CVE-2026-2651 | ML mlflow/mlflow mlflow | 9.0 | May 25 | Missing Authorization Validation in mlflow/mlflow |
| CVE-2026-2734 | ML mlflow/mlflow mlflow | 6.5 | May 21 | Authorization Bypass in SearchModelVersions in mlflow/mlflow |
| CVE-2026-2611 | ML mlflow/mlflow mlflow | 9.6 | May 19 | Improper Origin Validation in mlflow/mlflow |
| CVE-2026-4137 | ML mlflow/mlflow mlflow | 7.8 | May 18 | Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow |
| CVE-2026-2652 | ML mlflow/mlflow mlflow | 8.6 | May 15 | Authentication Bypass in mlflow/mlflow |
| CVE-2026-2614 | ML mlflow/mlflow mlflow | 7.5 | May 11 | Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow |
| CVE-2026-2393 | ML mlflow/mlflow mlflow | 7.1 | May 11 | Server-Side Request Forgery (SSRF) in mlflow/mlflow |
| CVE-2026-33866 | ML Mlflow Mlflow | 4.3 | Apr 7 | Authorization Bypass in MLflow AJAX Endpoint |
| CVE-2026-33865 | ML Mlflow Mlflow | 5.4 | Apr 7 | Stored XSS via unsafe YAML parsing in MLflow |
| CVE-2026-0545 | ML mlflow/mlflow mlflow | 9.8 | Apr 3 | Missing Authentication for Critical Function in mlflow/mlflow |
| CVE-2026-0596 | ML mlflow/mlflow mlflow | 7.8 | Mar 31 | Command Injection in mlflow/mlflow |
| CVE-2025-15379 | ML mlflow/mlflow mlflow | 10.0 | Mar 30 | Command Injection in mlflow/mlflow |
| CVE-2025-15036 | ML mlflow/mlflow mlflow | 10.0 | Mar 30 | Path Traversal Vulnerability in mlflow/mlflow |
| CVE-2025-15381 | ML mlflow/mlflow mlflow | 7.1 | Mar 27 | Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow |
| CVE-2025-15031 | ML mlflow/mlflow mlflow | 9.1 | Mar 18 | Path Traversal Vulnerability in mlflow/mlflow |
| CVE-2025-14287 | ML mlflow/mlflow mlflow | 8.8 | Mar 15 | Command Injection in mlflow/mlflow |
| CVE-2026-2635 | ML MLflow MLflow | 7.3 | Feb 20 | MLflow Use of Default Password Authentication Bypass Vulnerability |
| CVE-2026-2033 | ML MLflow MLflow | 7.3 | Feb 20 | MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability |