MLflow vulnerabilities
89 CVEs and advisories name MLflow as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-118628MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
- CVE-2026-118627MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2026-118626MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
- CVE-2026-118625MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
- CVE-2026-118624MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability
- CVE-2026-118623MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact…
- CVE-2026-116691MLflow CrewAI autologging records LLM provider API keys in logged trace spans
- CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
- CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
- CVE-2026-53995MLflow 3.17.1 and prior Path Traversal via Trace ID API
- CVE-2026-96804CVE-2026-96804
- CVE-2026-96775MLflow dspy bypasses pickle deserialization control
- CVE-2026-79721Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to
- CVE-2026-69146MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
- CVE-2026-69148MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
- CVE-2026-71211mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
- CVE-2026-8147Authorization Bypass in mlflow/mlflow
- CVE-2026-4035Environment Variable Resolution Vulnerability in mlflow/mlflow
- CVE-2026-3198Improper Access Control in mlflow/mlflow
- CVE-2026-2651Missing Authorization Validation in mlflow/mlflow
- CVE-2026-2734Authorization Bypass in SearchModelVersions in mlflow/mlflow
- CVE-2026-2611Improper Origin Validation in mlflow/mlflow
- CVE-2026-4137Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
- CVE-2026-2652Authentication Bypass in mlflow/mlflow
- CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow
- CVE-2026-2393Server-Side Request Forgery (SSRF) in mlflow/mlflow
- CVE-2026-33866Authorization Bypass in MLflow AJAX Endpoint
- CVE-2026-33865Stored XSS via unsafe YAML parsing in MLflow