Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3MLflow Server-Side Request Forgery VulnerabilityKEVEPSS 9.8%Aug 17, 2026
- Critical9.0A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled.May 25, 2026
- Medium6.5In mlflow/mlflow versions up to 3.9.0, the REST API endpoint and the GraphQL query lack proper per-model authorization checks when basic authentication is enabled.May 21, 2026
- Critical9.6In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.EPSS 0.4%May 19, 2026
- High7.8In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directori…May 18, 2026
- High8.6A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enab…May 15, 2026
- High7.5A vulnerability in the handler of in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's files…May 11, 2026
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.May 11, 2026
- Medium5.3MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.Apr 7, 2026
- Medium5.1MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.Apr 7, 2026
- Critical9.8In mlflow/mlflow, the FastAPI job endpoints under are not protected by authentication or authorization when the app is enabled.EPSS 4.4%Apr 3, 2026
- High7.8A command injection vulnerability exists in mlflow/mlflow when serving a model with .EPSS 1.3%Mar 31, 2026
- Critical10.0A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the function.EPSS 2.4%Mar 30, 2026
- Critical10.0A path traversal vulnerability exists in the function within the file of the mlflow/mlflow repository.EPSS 0.6%Mar 30, 2026
- High7.1In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.EPSS 0.3%Mar 27, 2026
- Critical9.1A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries.EPSS 0.9%Mar 18, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.EPSS 1.5%Mar 16, 2026
- High7.3MLflow Use of Default Password Authentication Bypass Vulnerability.Feb 20, 2026
- High7.3MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability.Feb 20, 2026
19 records · page 1 of 1
PreviousNext