| CVE-2026-8147 |
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper…
|
8.1
High
|
Jul 2, 2026 |
| CVE-2026-4035 |
A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI…
|
9.1
Critical
|
Jun 3, 2026 |
| CVE-2026-3198 |
MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API…
|
6.5
Medium
|
Jun 2, 2026 |
| CVE-2026-2651 |
A vulnerability in MLflow…
|
9.0
Critical
|
May 25, 2026 |
| CVE-2026-2734 |
In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions`…
|
6.5
Medium
|
May 21, 2026 |
| CVE-2026-2611 |
In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints
|
9.6
Critical
|
May 19, 2026 |
| CVE-2026-4137 |
In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py`…
|
7.0
High
|
May 18, 2026 |
| CVE-2026-2652 |
A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when…
|
8.6
High
|
May 15, 2026 |
| CVE-2026-2614 |
A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions…
|
7.5
High
|
May 11, 2026 |
| CVE-2026-2393 |
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0
|
7.1
High
|
May 11, 2026 |
| CVE-2026-0545 |
In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or…
|
9.1
Critical
|
Apr 3, 2026 |
| CVE-2026-0596 |
A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`
|
9.6
Critical
|
Mar 31, 2026 |
| CVE-2025-15379 |
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the…
|
10.0
Critical
|
Mar 30, 2026 |
| CVE-2025-15036 |
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the…
|
9.6
Critical
|
Mar 30, 2026 |
| CVE-2025-15381 |
Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow
|
8.1
High
|
Mar 27, 2026 |
| CVE-2025-15031 |
A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar…
|
8.1
High
|
Mar 18, 2026 |
| CVE-2025-14287 |
A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the…
|
7.5
High
|
Mar 15, 2026 |
| CVE-2025-10279 |
In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure…
|
7.0
High
|
Feb 2, 2026 |
| CVE-2025-14279 |
MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header…
|
8.1
High
|
Jan 12, 2026 |
| CVE-2025-0453 |
In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack
|
5.9
Medium
|
Mar 20, 2025 |
| CVE-2025-1474 |
In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password
|
3.8
Low
|
Mar 20, 2025 |
| CVE-2025-1473 |
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to…
|
5.4
Medium
|
Mar 20, 2025 |
| CVE-2024-8859 |
A path traversal vulnerability exists in mlflow/mlflow version 2.15.1
|
7.5
High
|
Mar 20, 2025 |
| CVE-2024-6838 |
In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a…
|
5.3
Medium
|
Mar 20, 2025 |
| CVE-2024-2928 |
A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was…
|
7.5
High
|
Jun 6, 2024 |