- Latest release
- 3.18.0 (Nov 3, 2026): no advisory affects it
- Newest unaffected release
- 3.18.0 (Nov 3, 2026), the latest release
- Advisories
- 85 · 24 critical, 44 high, 14 medium, 2 low
- Weekly downloads
- 5.2M
- Dependents
- 693
- Releases
- 193 since 0.0.1 (Jun 4, 2018)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-116692Affects 3.12.0rc0 to 3.16.1 (3.17.0 is outside it)
- CVE-2026-116691Affects 2.19.0 to 3.16.1 (3.17.0 is outside it)
- CVE-2026-116690Affects 3.10.0 to 3.16.1 (3.17.0 is outside it)
- CVE-2026-115886Affects 3.12.0rc0 to 3.16.1 (3.17.0 is outside it)
- CVE-2026-53995Affects 0.0.1 to 3.17.1 (3.17.2 is outside it)
- CVE-2026-64849Affects 0.0.1 to 3.14.0 (3.15.0 is outside it)
- CVE-2026-71211Affects 3.13.0 to 3.15.2 (3.16.0 is outside it)
- CVE-2026-8147Affects 2.14.0rc0 to 3.12.0 (3.13.0rc0 is outside it)
- CVE-2026-10803Affects 0.0.1 to 3.10.0 (3.10.1 is outside it)
- CVE-2026-4035Affects 0.0.1 to 3.11.0rc1 (3.11.0 is outside it)
- CVE-2026-3198Affects 0.0.1 to 3.10.1 (3.11.0rc0 is outside it)
- CVE-2026-2651Affects 0.0.1 to 3.10.1 (3.11.0rc0 is outside it)
Show all 85 advisoriesShow fewer advisories
- CVE-2026-2734Affects 0.0.1 to 3.10.0rc0 (3.10.0 is outside it)
- CVE-2026-2611Affects 3.9.0 to 3.10.0rc0 (3.10.0 is outside it)
- CVE-2026-4137Affects 0.0.1 to 3.11.0rc1 (3.11.0 is outside it)
- CVE-2026-2652Affects 0.0.1 to 3.11.0rc1 (3.11.0 is outside it)
- CVE-2026-2614Affects 0.0.1 to 3.10.0rc0 (3.10.0 is outside it)
- CVE-2026-2393Affects 0.0.1 to 3.9.0rc0 (3.9.0 is outside it)
- CVE-2026-33866Affects 0.0.1 to 3.10.1 (3.11.0rc0 is outside it)
- CVE-2026-33865Affects 0.0.1 to 3.11.0 (3.11.1 is outside it)
- CVE-2026-0545Affects 0.0.1 to 3.10.1 (3.11.0rc0 is outside it)
- CVE-2026-0596Affects 0.0.1 to 3.9.0rc0 (3.9.0 is outside it)
- CVE-2025-15379Affects 0.0.1 to 3.8.0 (3.8.1 is outside it)
- CVE-2025-15036Affects 0.0.1 to 3.8.1 (3.9.0rc0 is outside it)
- CVE-2025-15381Affects 0.0.1 to 3.8.1 (3.9.0rc0 is outside it)
- CVE-2025-15031Affects 0.0.1 to 3.8.1 (3.9.0rc0 is outside it)
- CVE-2025-14287Affects 0.0.1 to 3.7.0 (3.8.0rc0 is outside it)
- CVE-2026-2635Affects 0.0.1 to 3.7.0 (3.8.0rc0 is outside it)
- CVE-2026-2033Affects 0.0.1 to 3.7.0 (3.8.0rc0 is outside it)
- CVE-2025-10279Affects 0.0.1 to 3.3.2 (3.4.0rc0 is outside it)
- CVE-2025-14279Affects 0.0.1 to 3.5.0rc0 (3.5.0 is outside it)
- CVE-2025-11200Affects 0.0.1 to 2.21.3 (2.22.0rc0 is outside it)
- CVE-2025-11201Affects 0.0.1 to 2.22.3 (2.22.4 is outside it); 3.0.0rc0 to 3.0.0rc3 (3.0.0 is outside it)
- CVE-2025-52967Affects 0.0.1 to 3.1.0rc0 (3.1.0 is outside it)
- CVE-2025-0453Affects 0.0.1 to 2.17.2 (2.18.0rc0 is outside it)
- CVE-2025-1474Affects 0.0.1 to 2.19.0rc0 (2.19.0 is outside it)
- CVE-2025-1473Affects 2.17.0 to 2.20.2 (2.20.3 is outside it)
- CVE-2024-8859Affects 0.0.1 to 2.16.2 (2.17.0rc0 is outside it)
- CVE-2024-6838Affects 0.0.1 to 2.13.2 (2.13.3 is outside it)
- CVE-2024-27134Affects 0.0.1 to 2.15.1 (2.16.0 is outside it)
- CVE-2024-2928Affects 0.0.1 to 2.11.2 (2.11.3 is outside it)
- CVE-2024-0520Affects 0.0.1 to 2.8.1 (2.9.0 is outside it)
- CVE-2024-3099Affects 0.0.1 to 2.11.2 (2.11.3 is outside it)
- CVE-2024-37061Affects 1.11.0 to 2.13.1 (2.13.2 is outside it)
- CVE-2024-37060Affects 1.27.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37059Affects 0.5.0 to 3.4.0 (3.5.0rc0 is outside it)
- CVE-2024-37058Affects 2.5.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37057Affects 2.0.0rc0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37056Affects 1.23.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37055Affects 1.24.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37054Affects 0.9.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37053Affects 1.1.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-37052Affects 1.1.0 to 2.14.1 (2.14.2.dev0 is outside it)
- CVE-2024-4263Affects 0.0.1 to 2.10.0 (2.10.1 is outside it)
- CVE-2024-3848Affects 0.0.1 to 2.12.0 (2.12.1 is outside it)
- CVE-2024-3573Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2024-1558Affects 0.0.1 to 2.12.0 (2.12.1 is outside it)
- CVE-2024-1594Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2024-1593Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2024-1483Affects 0.0.1 to 2.12.0 (2.12.1 is outside it)
- CVE-2024-1560Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2024-27133Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2024-27132Affects 0.0.1 to 2.9.2 (2.10.0 is outside it)
- CVE-2023-6977Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6976Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6975Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6974Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6940Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6909Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6831Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6753Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6709Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-6568Affects 0.0.1 to 2.9.0 (2.9.1 is outside it)
- CVE-2023-43472Affects 0.0.1 to 2.8.1 (2.9.0 is outside it)
- CVE-2023-6014Affects 0.0.1 to 2.7.1 (2.8.0 is outside it)
- CVE-2023-6015Affects 0.0.1 to 2.8.0 (2.8.1 is outside it)
- CVE-2023-6018Affects 0.0.1 to 2.9.1 (2.9.2 is outside it)
- CVE-2023-4033Affects 0.0.1 to 2.5.0 (2.6.0 is outside it)
- CVE-2023-3765Affects 0.0.1 to 2.4.2 (2.5.0 is outside it)
- CVE-2023-2780Affects 0.0.1 to 2.3.0 (2.3.1 is outside it)
- CVE-2023-30172Affects 0.0.1 to 2.0.0 (2.0.1 is outside it)
- CVE-2023-2356Affects 0.0.1 to 2.3.0 (2.3.1 is outside it)
- CVE-2023-1177Affects 0.0.1 to 2.2.0 (2.2.1 is outside it)
- CVE-2023-1176Affects 0.0.1 to 2.2.1 (2.2.2 is outside it)
- CVE-2022-0736Affects 0.0.1 to 1.23.0 (1.23.1 is outside it)
Advisories 85
- CVE-2026-116692Critical 9.8
MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact…
Affected: from 3.12.0rc0, fixed in 3.17.0.
Fixed in 3.17.0 (released Oct 7, 2026, 20 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-116691Medium 6.5
MLflow CrewAI autologging records LLM provider API keys in logged trace spans
Affected: from 2.19.0, fixed in 3.17.0.
Fixed in 3.17.0 (released Oct 7, 2026, 20 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-116690High 7.5
MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
Affected: from 3.10.0, fixed in 3.17.0.
Fixed in 3.17.0 (released Oct 7, 2026, 20 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-115886Medium 6.5
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
Affected: from 3.12.0rc0, fixed in 3.17.0.
Fixed in 3.17.0 (released Oct 7, 2026, 16 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-53995High 8.8
MLflow 3.17.1 and prior Path Traversal via Trace ID API
Affected: fixed in 3.17.2.
Fixed in 3.17.2 (released Oct 21, 2026, 2 days after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-64849Critical 9.3 · KEV
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
Affected: from 3.3.0, fixed in 3.15.0; fixed in 3.15.0.
Fixed in 3.15.0 (released Jul 31, 2026, 17 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-71211High 7.1
mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
Affected: from 3.13.0, through 3.15.2.
Fixed in 3.16.0 (released Sep 4, 2026, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2026-8147High 8.1
Authorization Bypass in mlflow/mlflow
Affected: from 2.14.0rc0, fixed in 3.13.0rc0.
Fixed in 3.13.0rc0 (released May 22, 2026, 41 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-10803Low 2.0
MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash
Affected: fixed in 3.10.1.
Fixed in 3.10.1 (released Mar 5, 2026, 91 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-4035Critical 9.1
Environment Variable Resolution Vulnerability in mlflow/mlflow
Affected: fixed in 3.11.0.
Fixed in 3.11.0 (released Apr 7, 2026, 57 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-3198Medium 6.5
Improper Access Control in mlflow/mlflow
Affected: fixed in 3.11.0rc0.
Fixed in 3.11.0rc0 (released Mar 16, 2026, 78 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2651Critical 9.0
Missing Authorization Validation in mlflow/mlflow
Affected: fixed in 3.11.0rc0; fixed in 3.10.0.
Fixed in 3.11.0rc0 (released Mar 16, 2026, 70 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2734Medium 6.5
Authorization Bypass in SearchModelVersions in mlflow/mlflow
Affected: fixed in 3.10.0.
Fixed in 3.10.0 (released Feb 20, 2026, 90 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2611Critical 9.6
Improper Origin Validation in mlflow/mlflow
Affected: from 3.9.0, fixed in 3.10.0.
Fixed in 3.10.0 (released Feb 20, 2026, 88 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-4137High 7.0
Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
Affected: fixed in 3.11.0; from 1.26.0, fixed in 3.11.0.
Fixed in 3.11.0 (released Apr 7, 2026, 41 days before disclosure).
The latest release, 3.18.0, is not affected.
Show all 85 advisoriesShow fewer advisories
- CVE-2026-2652High 8.6
Authentication Bypass in mlflow/mlflow
Affected: fixed in 3.10.0; fixed in 3.11.0.
Fixed in 3.11.0 (released Apr 7, 2026, 38 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2614High 7.5
Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow
Affected: fixed in 3.10.0.
Fixed in 3.10.0 (released Feb 20, 2026, 80 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2393High 7.1
Server-Side Request Forgery (SSRF) in mlflow/mlflow
Affected: fixed in 3.9.0.
Fixed in 3.9.0 (released Jan 29, 2026, 102 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-33866Medium 5.3
Authorization Bypass in MLflow AJAX Endpoint
Affected: fixed in 3.11.0rc0.
Fixed in 3.11.0rc0 (released Mar 16, 2026, 22 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-33865Medium 5.1
Stored XSS via unsafe YAML parsing in MLflow
Affected: fixed in 3.11.1; fixed in 3.11.0rc0.
Fixed in 3.11.1 (released Apr 7, 2026, the day of disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-0545Critical 9.1
Missing Authentication for Critical Function in mlflow/mlflow
Affected: through 3.10.1.
Fixed in 3.11.0 (released Apr 7, 2026, 4 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2026-0596Critical 9.6
Command Injection in mlflow/mlflow
Affected: fixed in 3.9.0.
Fixed in 3.9.0 (released Jan 29, 2026, 61 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-15379Critical 10.0
Command Injection in mlflow/mlflow
Affected: fixed in 3.8.1.
Fixed in 3.8.1 (released Dec 26, 2025, 94 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-15036Critical 9.6
Path Traversal Vulnerability in mlflow/mlflow
Affected: fixed in 3.9.0rc0.
Fixed in 3.9.0rc0 (released Jan 16, 2026, 73 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-15381High 8.1
Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow
Affected: through 3.8.1.
Fixed in 3.9.0 (released Jan 29, 2026, 57 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2025-15031High 8.1
Path Traversal Vulnerability in mlflow/mlflow
Affected: fixed in 3.9.0rc0.
Fixed in 3.9.0rc0 (released Jan 16, 2026, 61 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-14287High 7.5
Command Injection in mlflow/mlflow
Affected: fixed in 3.8.0rc0.
Fixed in 3.8.0rc0 (released Dec 15, 2025, 90 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2635Critical 9.8
MLflow Use of Default Password Authentication Bypass Vulnerability
Affected: fixed in 3.8.0rc0.
Fixed in 3.8.0rc0 (released Dec 15, 2025, 67 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2026-2033High 8.1
MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
Affected: fixed in 3.8.0rc0.
Fixed in 3.8.0rc0 (released Dec 15, 2025, 67 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-10279High 7.0
Privilege Escalation in mlflow/mlflow
Affected: fixed in 3.4.0rc0.
Fixed in 3.4.0rc0 (released Sep 12, 2025, 143 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-14279High 8.1
DNS Rebinding Vulnerability in mlflow/mlflow
Affected: fixed in 3.5.0.
Fixed in 3.5.0 (released Oct 16, 2025, 88 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-11200High 8.1
MLflow Weak Password Requirements Authentication Bypass Vulnerability
Affected: fixed in 2.22.0rc0.
Fixed in 2.22.0rc0 (released Apr 16, 2025, 196 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-11201High 8.1
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
Affected: fixed in 2.22.4; from 3.0.0rc0, fixed in 3.0.0; from 3.0.0rc0, fixed in 3.0.0; fixed in 2.22.4.
Fixed in 2.22.4 (released Dec 5, 2025, 37 days after disclosure) and 3.0.0 (released Jun 10, 2025, 141 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-52967Medium 5.8
gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
Affected: from 3.0.0rc0, fixed in 3.1.0; fixed in 2.22.2; fixed in 3.1.0.
Fixed in 3.1.0 (released Jun 10, 2025, 13 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-0453Medium 5.9
Denial of Service through Batched Queries in GraphQL in mlflow/mlflow
Affected: through 2.17.2.
Fixed in 2.18.0 (released Nov 18, 2024, 122 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2025-1474Low 3.8
Weak Password Requirements in mlflow/mlflow
Affected: fixed in 2.19.0.
Fixed in 2.19.0 (released Dec 11, 2024, 99 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2025-1473Medium 5.4
CSRF in mlflow/mlflow
Affected: from 2.17.0, fixed in 2.20.3.
Fixed in 2.20.3 (released Feb 26, 2025, 22 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-8859High 7.5
Path Traversal in mlflow/mlflow
Affected: fixed in 2.17.0rc0.
Fixed in 2.17.0rc0 (released Sep 27, 2024, 174 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-6838Medium 5.3
Uncontrolled Resource Consumption in mlflow/mlflow
Affected: through 2.13.2.
Fixed in 2.13.3 (released Sep 24, 2026, 553 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-27134High 7.0
Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf
Affected: fixed in 2.16.0; fixed in 2.16.0.
Fixed in 2.16.0 (released Aug 30, 2024, 87 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-2928High 7.5
Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow
Affected: fixed in 2.11.3.
Fixed in 2.11.3 (released Mar 21, 2024, 77 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-0520Critical 10.0
Remote Code Execution due to Full Controlled File Write in mlflow/mlflow
Affected: fixed in 2.9.0; fixed in 2.9.0.
Fixed in 2.9.0 (released Dec 6, 2023, 183 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-3099Medium 5.4
Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow
Affected: fixed in 2.11.3.
Fixed in 2.11.3 (released Mar 21, 2024, 77 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-37061High 8.8
Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted…
Affected: from 1.11.0, through 2.13.1.
Fixed in 2.13.2 (released Jun 6, 2024, 2 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37060High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously…
Affected: from 1.27.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37059High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously…
Affected: from 0.5.0, through 3.4.0.
Fixed in 3.5.0 (released Oct 16, 2025, 499 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37058High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously…
Affected: from 2.5.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37057High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously…
Affected: from 2.0.0rc0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37056High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously…
Affected: from 1.23.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37055High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously…
Affected: from 1.24.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37054High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously…
Affected: from 0.9.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37053High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously…
Affected: from 1.1.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-37052High 8.8
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously…
Affected: from 1.1.0, through 2.14.1.
Fixed in 2.14.2 (released Jul 4, 2024, 30 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-4263Medium 5.4
Improper Access Control in mlflow/mlflow
Affected: fixed in 2.10.1.
Fixed in 2.10.1 (released Feb 6, 2024, 100 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-3848High 7.5
Path Traversal Bypass in mlflow/mlflow
Affected: fixed in 2.12.1; from 2.9.2, fixed in 2.12.1.
Fixed in 2.12.1 (released Apr 17, 2024, 29 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-3573Critical 9.3
Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow
Affected: fixed in 2.10.0; fixed in 2.10.0.
Fixed in 2.10.0 (released Jan 26, 2024, 81 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-1558High 7.5
Path Traversal Vulnerability in mlflow/mlflow
Affected: fixed in 2.12.1.
Fixed in 2.12.1 (released Apr 17, 2024, 1 day after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-1594High 7.5
Local File Read via Path Traversal in mlflow/mlflow
Affected: through 2.9.2.
Fixed in 2.10.0 (released Jan 26, 2024, 81 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-1593High 7.5
Path Traversal via Parameter Smuggling in mlflow/mlflow
Affected: through 2.9.2.
Fixed in 2.10.0 (released Jan 26, 2024, 81 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-1483High 7.5
Path Traversal Vulnerability in mlflow/mlflow
Affected: fixed in 2.12.1.
Fixed in 2.12.1 (released Apr 17, 2024, 1 day after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-1560High 8.1
Path Traversal Vulnerability in mlflow/mlflow
Affected: through 2.9.2.
Fixed in 2.10.0 (released Jan 26, 2024, 81 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 3.18.0, is not affected.
- CVE-2024-27133High 7.5
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.
Affected: through 2.9.2; fixed in 2.10.0.
Fixed in 2.10.0 (released Jan 26, 2024, 28 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2024-27132High 7.5
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
Affected: through 2.9.2; fixed in 2.10.0.
Fixed in 2.10.0 (released Jan 26, 2024, 28 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6977Critical 10.0
Path Traversal: '\..\filename'
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 6 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6976High 8.8
Unrestricted Upload of File with Dangerous Type
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 6 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6975Critical 9.8
Path Traversal: '\..\filename'
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 6 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6974High 8.6
Server-Side Request Forgery (SSRF)
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 6 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6940Critical 9.0
Command Injection
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 5 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6909High 7.5
Path Traversal: '\..\filename' in mlflow/mlflow
Affected: fixed in 2.9.2; fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 4 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6831High 8.1
Path Traversal: '\..\filename' in mlflow/mlflow
Affected: fixed in 2.9.2; fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 1 day before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6753Critical 9.6
Path Traversal in mlflow/mlflow
Affected: fixed in 2.9.2; fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 1 day after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6709Critical 10.0
Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow
Affected: fixed in 2.9.2; fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 2 days after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6568Medium 6.5
Reflected XSS via Content-Type Header in mlflow/mlflow
Affected: fixed in 2.9.1; fixed in 2.9.0.
Fixed in 2.9.1 (released Dec 7, 2023, the day of disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-43472Unrated
An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.
Affected: fixed in 2.9.0.
Fixed in 2.9.0 (released Dec 6, 2023, 1 day after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6014Critical 9.1
MLflow Authentication Bypass
Affected: fixed in 2.8.0.
Fixed in 2.8.0 (released Oct 29, 2023, 18 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6015Critical 10.0
MLflow Arbitrary File Upload
Affected: fixed in 2.8.1.
Fixed in 2.8.1 (released Nov 16, 2023, the day of disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-6018Critical 10.0
MLflow Arbitrary File Write
Affected: fixed in 2.9.2.
Fixed in 2.9.2 (released Dec 14, 2023, 28 days after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-4033High 8.8
OS Command Injection in mlflow/mlflow
Affected: fixed in 2.6.0; fixed in 2.6.0.
Fixed in 2.6.0 (released Aug 15, 2023, 14 days after disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-3765Critical 10.0
Absolute Path Traversal in mlflow/mlflow
Affected: fixed in 2.5.0; fixed in 2.5.0.
Fixed in 2.5.0 (released Jul 17, 2023, 2 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-2780Critical 9.8
Path Traversal: '\..\filename' in mlflow/mlflow
Affected: fixed in 2.3.1; fixed in 2.3.0.
Fixed in 2.3.1 (released Apr 28, 2023, 19 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-30172High 7.5
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary…
Affected: fixed in 2.0.1; fixed in 2.0.0rc0.
Fixed in 2.0.1 (released Nov 15, 2022, 177 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-2356Critical 10.0
Relative Path Traversal in mlflow/mlflow
Affected: fixed in 2.3.1; fixed in 2.3.1.
Fixed in 2.3.1 (released Apr 28, 2023, the day of disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-1177Critical 9.3
Path Traversal: '\..\filename' in mlflow/mlflow
Affected: fixed in 2.2.1.
Fixed in 2.2.1 (released Mar 2, 2023, 22 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2023-1176Medium 5.3
Absolute Path Traversal in mlflow/mlflow
Affected: fixed in 2.2.2; fixed in 2.2.1.
Fixed in 2.2.2 (released Mar 14, 2023, 10 days before disclosure).
The latest release, 3.18.0, is not affected.
- CVE-2022-0736High 8.2
Insecure Temporary File in mlflow/mlflow
Affected: fixed in 1.23.1.
Fixed in 1.23.1 (released Jan 27, 2022, 27 days before disclosure).
The latest release, 3.18.0, is not affected.