CVE-2023-4033 OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0

Description

OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
mlflow/mlflow 2.6	premières → < 2.6.0	2.6.0
MLflow 2.6	premières → < 2.6.0	2.6.0

Autres CVE de mlflow/mlflow

Les 55 CVE de mlflow/mlflow →

CVE-2026-8147 In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper… 8.1 Élevée CVE-2026-4035 A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI… 9.1 Critique CVE-2026-3198 MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API… 6.5 Moyenne CVE-2026-2651 A vulnerability in MLflow… 9.0 Critique