# cve.now: MLflow

The newest entries naming MLflow as an affected vendor (up to 200), of 89 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-118628](https://cve.now/CVE-2026-118628.md): MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 8.2)
- [CVE-2026-118627](https://cve.now/CVE-2026-118627.md): MLflow SHAP load\_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-118626](https://cve.now/CVE-2026-118626.md): MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability (CVSS 5.4)
- [CVE-2026-118625](https://cve.now/CVE-2026-118625.md): MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability (CVSS 6.3)
- [CVE-2026-118624](https://cve.now/CVE-2026-118624.md): MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability (CVSS 5.4)
- [CVE-2026-118623](https://cve.now/CVE-2026-118623.md): MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- [CVE-2026-116692](https://cve.now/CVE-2026-116692.md): MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact… (CVSS 9.8)
- [CVE-2026-116691](https://cve.now/CVE-2026-116691.md): MLflow CrewAI autologging records LLM provider API keys in logged trace spans (CVSS 6.5)
- [CVE-2026-116690](https://cve.now/CVE-2026-116690.md): MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source (CVSS 7.5)
- [CVE-2026-115886](https://cve.now/CVE-2026-115886.md): MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints (CVSS 6.5)
- [CVE-2026-53995](https://cve.now/CVE-2026-53995.md): MLflow 3.17.1 and prior Path Traversal via Trace ID API (CVSS 8.8)
- [CVE-2026-96804](https://cve.now/CVE-2026-96804.md): CVE-2026-96804 (CVSS 8.8)
- [CVE-2026-96775](https://cve.now/CVE-2026-96775.md): MLflow dspy bypasses pickle deserialization control (CVSS 8.8)
- [CVE-2026-79721](https://cve.now/CVE-2026-79721.md): Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to (CVSS 8.6)
- [CVE-2026-69146](https://cve.now/CVE-2026-69146.md): MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth (CVSS 6.5)
- [CVE-2026-69148](https://cve.now/CVE-2026-69148.md): MLflow: CreateModelVersion source validation does not check READ permission on referenced run\_id (CVSS 7.1)
- [CVE-2026-64849](https://cve.now/CVE-2026-64849.md): MLflow: Unauthenticated full-read SSRF in webhook delivery: \_validate\_webhook\_url bypassed via unvalidated HTTP redirects (and DNS rebinding) (CVSS 9.3, KEV)
- [CVE-2026-71211](https://cve.now/CVE-2026-71211.md): mlflow - Unvalidated Gateway Secret api\_base Enables SSRF via Gateway Proxy Endpoint (CVSS 7.1)
- [CVE-2026-8147](https://cve.now/CVE-2026-8147.md): Authorization Bypass in mlflow/mlflow (CVSS 8.1)
- [CVE-2026-4035](https://cve.now/CVE-2026-4035.md): Environment Variable Resolution Vulnerability in mlflow/mlflow (CVSS 9.1)
- [CVE-2026-3198](https://cve.now/CVE-2026-3198.md): Improper Access Control in mlflow/mlflow (CVSS 6.5)
- [CVE-2026-2651](https://cve.now/CVE-2026-2651.md): Missing Authorization Validation in mlflow/mlflow (CVSS 9.0)
- [CVE-2026-2734](https://cve.now/CVE-2026-2734.md): Authorization Bypass in SearchModelVersions in mlflow/mlflow (CVSS 6.5)
- [CVE-2026-2611](https://cve.now/CVE-2026-2611.md): Improper Origin Validation in mlflow/mlflow (CVSS 9.6)
- [CVE-2026-4137](https://cve.now/CVE-2026-4137.md): Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow (CVSS 7.0)
- [CVE-2026-2652](https://cve.now/CVE-2026-2652.md): Authentication Bypass in mlflow/mlflow (CVSS 8.6)
- [CVE-2026-2614](https://cve.now/CVE-2026-2614.md): Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow (CVSS 7.5)
- [CVE-2026-2393](https://cve.now/CVE-2026-2393.md): Server-Side Request Forgery (SSRF) in mlflow/mlflow (CVSS 7.1)
- [CVE-2026-33866](https://cve.now/CVE-2026-33866.md): Authorization Bypass in MLflow AJAX Endpoint (CVSS 5.3)
- [CVE-2026-33865](https://cve.now/CVE-2026-33865.md): Stored XSS via unsafe YAML parsing in MLflow (CVSS 5.1)
- [CVE-2026-0545](https://cve.now/CVE-2026-0545.md): Missing Authentication for Critical Function in mlflow/mlflow (CVSS 9.1)
- [CVE-2026-0596](https://cve.now/CVE-2026-0596.md): Command Injection in mlflow/mlflow (CVSS 9.6)
- [CVE-2025-15379](https://cve.now/CVE-2025-15379.md): Command Injection in mlflow/mlflow (CVSS 10.0)
- [CVE-2025-15036](https://cve.now/CVE-2025-15036.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 9.6)
- [CVE-2025-15381](https://cve.now/CVE-2025-15381.md): Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow (CVSS 8.1)
- [CVE-2025-15031](https://cve.now/CVE-2025-15031.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 8.1)
- [CVE-2025-14287](https://cve.now/CVE-2025-14287.md): Command Injection in mlflow/mlflow (CVSS 7.5)
- [CVE-2026-2635](https://cve.now/CVE-2026-2635.md): MLflow Use of Default Password Authentication Bypass Vulnerability (CVSS 9.8)
- [CVE-2026-2033](https://cve.now/CVE-2026-2033.md): MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability (CVSS 8.1)
- [CVE-2025-10279](https://cve.now/CVE-2025-10279.md): Privilege Escalation in mlflow/mlflow (CVSS 7.0)
- [CVE-2025-14279](https://cve.now/CVE-2025-14279.md): DNS Rebinding Vulnerability in mlflow/mlflow (CVSS 8.1)
- [CVE-2025-11200](https://cve.now/CVE-2025-11200.md): MLflow Weak Password Requirements Authentication Bypass Vulnerability (CVSS 8.1)
- [CVE-2025-11201](https://cve.now/CVE-2025-11201.md): MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability (CVSS 8.1)
- [CVE-2025-0453](https://cve.now/CVE-2025-0453.md): Denial of Service through Batched Queries in GraphQL in mlflow/mlflow (CVSS 5.9)
- [CVE-2025-1474](https://cve.now/CVE-2025-1474.md): Weak Password Requirements in mlflow/mlflow (CVSS 3.8)
- [CVE-2025-1473](https://cve.now/CVE-2025-1473.md): CSRF in mlflow/mlflow (CVSS 5.4)
- [CVE-2024-8859](https://cve.now/CVE-2024-8859.md): Path Traversal in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-6838](https://cve.now/CVE-2024-6838.md): Uncontrolled Resource Consumption in mlflow/mlflow (CVSS 5.3)
- [CVE-2024-2928](https://cve.now/CVE-2024-2928.md): Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-0520](https://cve.now/CVE-2024-0520.md): Remote Code Execution due to Full Controlled File Write in mlflow/mlflow (CVSS 10.0)
- [CVE-2024-3099](https://cve.now/CVE-2024-3099.md): Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow (CVSS 5.4)
- [CVE-2024-37061](https://cve.now/CVE-2024-37061.md): Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject (CVSS 8.8)
- [CVE-2024-37060](https://cve.now/CVE-2024-37060.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously craft (CVSS 8.8)
- [CVE-2024-37059](https://cve.now/CVE-2024-37059.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously upload (CVSS 8.8)
- [CVE-2024-37058](https://cve.now/CVE-2024-37058.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously upload (CVSS 8.8)
- [CVE-2024-37057](https://cve.now/CVE-2024-37057.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously upl (CVSS 8.8)
- [CVE-2024-37056](https://cve.now/CVE-2024-37056.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploa (CVSS 8.8)
- [CVE-2024-37055](https://cve.now/CVE-2024-37055.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploa (CVSS 8.8)
- [CVE-2024-37054](https://cve.now/CVE-2024-37054.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously upload (CVSS 8.8)
- [CVE-2024-37053](https://cve.now/CVE-2024-37053.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously upload (CVSS 8.8)
- [CVE-2024-37052](https://cve.now/CVE-2024-37052.md): Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously upload (CVSS 8.8)
- [CVE-2024-4263](https://cve.now/CVE-2024-4263.md): Improper Access Control in mlflow/mlflow (CVSS 5.4)
- [CVE-2024-3848](https://cve.now/CVE-2024-3848.md): Path Traversal Bypass in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-3573](https://cve.now/CVE-2024-3573.md): Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow (CVSS 9.3)
- [CVE-2024-1558](https://cve.now/CVE-2024-1558.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-1594](https://cve.now/CVE-2024-1594.md): Local File Read via Path Traversal in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-1593](https://cve.now/CVE-2024-1593.md): Path Traversal via Parameter Smuggling in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-1483](https://cve.now/CVE-2024-1483.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 7.5)
- [CVE-2024-1560](https://cve.now/CVE-2024-1560.md): Path Traversal Vulnerability in mlflow/mlflow (CVSS 8.1)
- [CVE-2023-6977](https://cve.now/CVE-2023-6977.md): Path Traversal: '\\..\\filename' (CVSS 10.0)
- [CVE-2023-6976](https://cve.now/CVE-2023-6976.md): Unrestricted Upload of File with Dangerous Type (CVSS 8.8)
- [CVE-2023-6975](https://cve.now/CVE-2023-6975.md): Path Traversal: '\\..\\filename' (CVSS 9.8)
- [CVE-2023-6974](https://cve.now/CVE-2023-6974.md): Server-Side Request Forgery (SSRF) (CVSS 8.6)
- [CVE-2023-6940](https://cve.now/CVE-2023-6940.md): Command Injection (CVSS 9.0)
- [CVE-2023-6909](https://cve.now/CVE-2023-6909.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 7.5)
- [CVE-2023-6831](https://cve.now/CVE-2023-6831.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 8.1)
- [CVE-2023-6753](https://cve.now/CVE-2023-6753.md): Path Traversal in mlflow/mlflow (CVSS 9.6)
- [CVE-2023-6709](https://cve.now/CVE-2023-6709.md): Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow (CVSS 10.0)
- [CVE-2023-6568](https://cve.now/CVE-2023-6568.md): Reflected XSS via Content-Type Header in mlflow/mlflow (CVSS 6.5)
- [CVE-2023-6014](https://cve.now/CVE-2023-6014.md): MLflow Authentication Bypass (CVSS 9.1)
- [CVE-2023-6015](https://cve.now/CVE-2023-6015.md): MLflow Arbitrary File Upload (CVSS 10.0)
- [CVE-2023-6018](https://cve.now/CVE-2023-6018.md): MLflow Arbitrary File Write (CVSS 10.0)
- [CVE-2023-4033](https://cve.now/CVE-2023-4033.md): OS Command Injection in mlflow/mlflow (CVSS 8.8)
- [CVE-2023-3765](https://cve.now/CVE-2023-3765.md): Absolute Path Traversal in mlflow/mlflow (CVSS 10.0)
- [CVE-2023-2780](https://cve.now/CVE-2023-2780.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 9.8)
- [CVE-2023-2356](https://cve.now/CVE-2023-2356.md): Relative Path Traversal in mlflow/mlflow (CVSS 10.0)
- [CVE-2023-1177](https://cve.now/CVE-2023-1177.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 9.3)
- [CVE-2023-1176](https://cve.now/CVE-2023-1176.md): Absolute Path Traversal in mlflow/mlflow (CVSS 5.3)
- [CVE-2022-0736](https://cve.now/CVE-2022-0736.md): Insecure Temporary File in mlflow/mlflow (CVSS 8.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mlflow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.