MLflow

Products

Exploited and recent CVEs

• CVE-2026-64849 Critical 9.3 Exploited MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) 10.0%
• CVE-2026-118628 High 8.2 MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability 0.3%
• CVE-2026-118627 High 7.8 MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.2%
• CVE-2026-118626 Medium 5.4 MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability 0.2%
• CVE-2026-118625 Medium 6.3 MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability 0.3%
• CVE-2026-118624 Medium 5.4 MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability 0.4%
• CVE-2026-118623 High 7.8 MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.4%
• CVE-2026-116692 Critical 9.8 MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules 0.7%
• CVE-2026-116691 Medium 6.5 MLflow CrewAI autologging records LLM provider API keys in logged trace spans 0.2%
• CVE-2026-116690 High 7.5 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source 1.8%
• CVE-2026-115886 Medium 6.5 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints 0.7%
• CVE-2026-53995 High 8.2 MLflow 3.17.1 and prior Path Traversal via Trace ID API 0.6%
• CVE-2026-96804 High 8.8 CVE-2026-96804 0.7%
• CVE-2026-96775 High 8.8 MLflow dspy bypasses pickle deserialization control 0.6%
• CVE-2026-79721 High 8.6 Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded 0.5%
• CVE-2026-69146 Medium 6.5 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth 0.4%
• CVE-2026-69148 High 7.1 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id 0.4%
• CVE-2026-71211 High 7.1 mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint 0.3%
• CVE-2026-8147 High 8.1 Authorization Bypass in mlflow/mlflow 0.5%
• CVE-2026-4035 High 7.7 Environment Variable Resolution Vulnerability in mlflow/mlflow 0.5%
• CVE-2026-3198 Medium 6.5 Improper Access Control in mlflow/mlflow 0.2%
• CVE-2026-2651 Critical 9.0 Missing Authorization Validation in mlflow/mlflow 0.3%
• CVE-2026-2734 Medium 6.5 Authorization Bypass in SearchModelVersions in mlflow/mlflow 0.4%
• CVE-2026-2611 Critical 9.6 Improper Origin Validation in mlflow/mlflow 0.4%
• CVE-2026-4137 High 7.0 Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow 0.2%
• CVE-2026-2652 High 8.6 Authentication Bypass in mlflow/mlflow 20.8%
• CVE-2026-2614 High 7.5 Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow 3.7%
• CVE-2026-2393 High 7.1 Server-Side Request Forgery (SSRF) in mlflow/mlflow 0.3%
• CVE-2026-33866 Medium 5.3 Authorization Bypass in MLflow AJAX Endpoint 0.4%
• CVE-2026-33865 Medium 5.1 Stored XSS via unsafe YAML parsing in MLflow 0.2%