What’s Vulnerable › Products
mlflow/mlflow vulnerabilities
88 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 37 published in the last 12 months.
Check whether your mlflow/mlflow version is affected
Exploited mlflow/mlflow vulnerabilities
- CVE-2026-64849 — MLflow Server-Side Request Forgery Vulnerability
Latest mlflow/mlflow vulnerabilities
- CVE-2026-115886 — MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints (CVSS 6.5)
- CVE-2026-53995 — MLflow 3.17.1 and prior Path Traversal via Trace ID API (CVSS 8.2)
- CVE-2026-96804 — CVE-2026-96804 (CVSS 8.8)
- CVE-2026-96775 — MLflow dspy bypasses pickle deserialization control (CVSS 8.8)
- CVE-2026-79721 — (CVSS 8.6)
- CVE-2026-69148 — MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id (CVSS 7.1)
- CVE-2026-69146 — MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth (CVSS 6.5)
- CVE-2026-64849 — MLflow Server-Side Request Forgery Vulnerability (CVSS 9.3) — exploited
- CVE-2026-71211 — mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint (CVSS 7.1)
- CVE-2026-8147 — Authorization Bypass in mlflow/mlflow (CVSS 8.1)
- CVE-2026-13484 — MLflow Experiment-scoped Label Schema CRUD API authorization (CVSS 8.8)
- CVE-2026-10803 — MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash (CVSS 3.6)
- CVE-2026-4035 — Environment Variable Resolution Vulnerability in mlflow/mlflow (CVSS 7.7)
- CVE-2026-3198 — Improper Access Control in mlflow/mlflow (CVSS 6.5)
- CVE-2026-2651 — Missing Authorization Validation in mlflow/mlflow (CVSS 9.0)
- CVE-2026-2734 — Authorization Bypass in SearchModelVersions in mlflow/mlflow (CVSS 6.5)
- CVE-2026-2611 — Improper Origin Validation in mlflow/mlflow (CVSS 9.6)
- CVE-2026-4137 — Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow (CVSS 7.8)
- CVE-2026-2652 — Authentication Bypass in mlflow/mlflow (CVSS 8.6)
- CVE-2026-2614 — Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow (CVSS 7.5)
- CVE-2026-2393 — Server-Side Request Forgery (SSRF) in mlflow/mlflow (CVSS 7.1)
- CVE-2026-33866 — Authorization Bypass in MLflow AJAX Endpoint (CVSS 4.3)
- CVE-2026-33865 — Stored XSS via unsafe YAML parsing in MLflow (CVSS 5.4)
- CVE-2026-0545 — Missing Authentication for Critical Function in mlflow/mlflow (CVSS 9.8)
- CVE-2026-0596 — Command Injection in mlflow/mlflow (CVSS 7.8)