| CVE-2026-118628 |
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
|
8.2
High
|
Nov 3, 2026 |
| CVE-2026-118627 |
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
High
|
Nov 3, 2026 |
| CVE-2026-118626 |
MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
|
5.4
Medium
|
Nov 3, 2026 |
| CVE-2026-118625 |
MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
|
6.3
Medium
|
Nov 3, 2026 |
| CVE-2026-118624 |
MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability
|
5.4
Medium
|
Nov 3, 2026 |
| CVE-2026-118623 |
MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
High
|
Nov 3, 2026 |
| CVE-2026-116692 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
9.8
Critical
|
Oct 27, 2026 |
| CVE-2026-116691 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
6.5
Medium
|
Oct 27, 2026 |
| CVE-2026-116690 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
7.5
High
|
Oct 27, 2026 |
| CVE-2026-115886 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
6.5
Medium
|
Oct 23, 2026 |
| CVE-2026-53995 |
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows…
|
8.8
High
|
Oct 19, 2026 |
| CVE-2026-96804 |
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security…
|
8.8
High
|
Sep 23, 2026 |
| CVE-2026-96775 |
MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when…
|
8.8
High
|
Sep 23, 2026 |
| CVE-2026-79721 |
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously…
|
8.6
High
|
Sep 8, 2026 |
| CVE-2026-69146 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
6.5
Medium
|
Aug 17, 2026 |
| CVE-2026-69148 |
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
|
7.1
High
|
Aug 17, 2026 |
| CVE-2026-64849 |
Exploited
MLflow Server-Side Request Forgery Vulnerability
|
9.3
Critical
|
Aug 17, 2026 |
| CVE-2026-71211 |
MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py,…
|
7.1
High
|
Aug 5, 2026 |
| CVE-2026-33866 |
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts
|
5.3
Medium
|
Apr 7, 2026 |
| CVE-2026-33865 |
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in…
|
5.1
Medium
|
Apr 7, 2026 |
| CVE-2026-2635 |
MLflow Use of Default Password Authentication Bypass Vulnerability
|
9.8
Critical
|
Feb 20, 2026 |
| CVE-2026-2033 |
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
|
8.1
High
|
Feb 20, 2026 |
| CVE-2025-11200 |
MLflow Weak Password Requirements Authentication Bypass Vulnerability
|
8.1
High
|
Oct 29, 2025 |
| CVE-2025-11201 |
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
|
8.1
High
|
Oct 29, 2025 |
| CVE-2024-37061 |
Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a…
|
8.8
High
|
Jun 4, 2024 |