PyPI/mlflow

MLflow: trace API endpoints lack proper authorization validators

Modified: 8/19/2026

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

Modified: 10/23/2026

MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution

Modified: 4/8/2025

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

Modified: 7/13/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

Modified: 9/10/2026

MLflow Uncontrolled Resource Consumption vulnerability

Modified: 7/7/2026

MLflow authentication requirement bypass can allow a user to arbitrarily create an account

Modified: 6/29/2026

MLflow has Weak Password Requirements

Modified: 4/9/2025

MLflow has a Local File Read/Path Traversal in dbfs

Modified: 7/7/2026

mlflow Creates of Temporary File in Directory with Insecure Permissions

Modified: 9/10/2026

Path traversal in MLflow

Modified: 2/16/2024

MLflow Server-Side Request Forgery (SSRF)

Modified: 6/29/2026

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

Remote Code Execution due to Full Controled File Write in mlflow

Modified: 6/29/2026

Remote code execution in mlflow

Modified: 4/8/2025

MLflow: Deterministic sampling in dataset digest enables predictable collisions

Modified: 7/15/2026

MLflow Path Traversal Vulnerability

Modified: 2/15/2025

MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability

Modified: 7/13/2026

Cross-site Scripting in MLFlow

Modified: 4/8/2025

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

Modified: 10/5/2026

MLflow Weak Password Requirements Authentication Bypass Vulnerability

Modified: 7/7/2026

MLflow: unauthenticated access to certain FastAPI routes

Modified: 7/13/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Modified: 10/2/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

Modified: 9/10/2026

Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs

Modified: 11/28/2024

MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled

Modified: 10/6/2026

Undefined Behavior in mlflow

Modified: 7/7/2026

MLflow Cross-Site Request Forgery (CSRF) vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

Jinja2 template injection in mlflow

Modified: 11/22/2024

MLFlow Creates a Temporary File With Insecure Permissions

Modified: 9/1/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLflow allowed arbitrary files to be PUT onto the server

Modified: 6/29/2026

mlflow Path Traversal vulnerability

Modified: 7/7/2026

mlflow vulnerable to OS Command Injection

Modified: 11/22/2024

MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface

Modified: 9/10/2026

Arbitrary file write via tar traversal in mlflow

Modified: 9/10/2026

MLflow Path Traversal vulnerability

Modified: 4/10/2025

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

Modified: 7/13/2026

MLFlow allows Tracing + Assessments Access

Modified: 9/10/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLflow Use of Default Password Authentication Bypass Vulnerability

Modified: 9/10/2026

MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact

Modified: 9/1/2026

MLflow AI Gateway permits SSRF through an unvalidated api_base

Modified: 9/10/2026

MLFlow Path Traversal Vulnerability

Modified: 6/29/2026

mlflow vulnerable to Path Traversal

Modified: 4/8/2025

mlflow Command Injection vulnerability

Modified: 7/7/2026

Local File Inclusion in mlflow

Modified: 4/8/2025

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLflow allows low privilege users to delete any artifact

Modified: 2/22/2026

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

Modified: 9/10/2026

MLFlow improper input validation

Modified: 9/10/2026

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

Modified: 9/10/2026

MLflow Uncontrolled Resource Consumption vulnerability

Modified: 7/7/2026

MLflow Local File Disclosure Vulnerability

Modified: 7/7/2026

MLflow's excessive directory permissions allow local privilege escalation

Modified: 2/3/2025

MLflow Command Injection vulnerability

Modified: 9/10/2026

MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

Modified: 7/13/2026

MLflow has a Local File Read/Path Traversal bypass

Modified: 4/8/2025

Mlflow: Command Injection when serving models with enable_mlserver=True

Modified: 6/29/2026

Path traversal in MLflow

Modified: 4/9/2025

MLFlow path traversal vulnerability

Modified: 9/10/2026

Insecure Temporary File in mlflow

Modified: 2/21/2025

Cross-site Scripting (XSS) in MLflow

Modified: 4/16/2024

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

Modified: 7/13/2026

mflow vulnerable to directory traversal

Modified: 2/16/2024

MLFlow unsafe deserialization

Modified: 9/10/2026

mlflow Path Traversal vulnerability

Modified: 9/24/2024

Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs

Modified: 9/25/2024

MLflow FileStore trace IDs allow path traversal and arbitrary file writes

Modified: 10/23/2026

Information exposure in MLflow

Modified: 7/7/2026

MLflow Path Traversal Vulnerability

Modified: 7/7/2026

MLFlow SSRF via gateway_proxy_handler

Modified: 9/25/2025

MLFlow unsafe deserialization

Modified: 7/7/2026

Relative path traversal in mlflow

Modified: 2/16/2025

MLflow has a command injection in mlflow/sagemaker/__init__.py

Modified: 9/10/2026

mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs

Modified: 2/22/2026

Modified: 12/6/2023

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

Modified: 6/10/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLflow Uncontrolled Resource Consumption vulnerability

Modified: 7/7/2026

MLflow has a Local File Read/Path Traversal in dbfs

Modified: 7/7/2026

mlflow Creates of Temporary File in Directory with Insecure Permissions

Modified: 7/7/2026

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLflow Weak Password Requirements Authentication Bypass Vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

Undefined Behavior in mlflow

Modified: 7/7/2026

MLflow Cross-Site Request Forgery (CSRF) vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

mlflow Path Traversal vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

mlflow Command Injection vulnerability

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

mlflow vulnerable to Path Traversal

Modified: 7/7/2026

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

Modified: 7/7/2026

MLFlow improper input validation

Modified: 7/7/2026

MLflow Uncontrolled Resource Consumption vulnerability

Modified: 7/7/2026

MLflow Local File Disclosure Vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

Information exposure in MLflow

Modified: 7/7/2026

MLflow Path Traversal Vulnerability

Modified: 7/7/2026

MLFlow unsafe deserialization

Modified: 7/7/2026

Modified: 7/23/2026

Modified: 7/13/2026

Modified: 7/13/2026

Modified: 7/13/2026

Modified: 7/13/2026

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

Modified: 7/13/2026

MLFlow Creates a Temporary File With Insecure Permissions

Modified: 7/13/2026

Arbitrary file write via tar traversal in mlflow

Modified: 7/13/2026

MLFlow allows Tracing + Assessments Access

Modified: 7/13/2026

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

Modified: 7/13/2026

MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

Modified: 7/13/2026

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

Modified: 7/13/2026

MLflow has a command injection in mlflow/sagemaker/__init__.py

Modified: 7/13/2026

MLflow: trace API endpoints lack proper authorization validators

Modified: 8/19/2026

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Modified: 8/21/2026

MLflow AI Gateway permits SSRF through an unvalidated api_base

Modified: 9/10/2026

MLflow authentication requirement bypass can allow a user to arbitrarily create an account

Modified: 7/1/2026

MLflow Server-Side Request Forgery (SSRF)

Modified: 7/1/2026

Remote Code Execution due to Full Controled File Write in mlflow

Modified: 7/13/2026

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

Modified: 7/1/2026

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

Modified: 7/1/2026

MLflow allowed arbitrary files to be PUT onto the server

Modified: 7/1/2026

MLflow Use of Default Password Authentication Bypass Vulnerability

Modified: 7/1/2026

MLFlow Path Traversal Vulnerability

Modified: 7/1/2026

MLflow Command Injection vulnerability

Modified: 7/1/2026

Mlflow: Command Injection when serving models with enable_mlserver=True

Modified: 7/1/2026

MLFlow path traversal vulnerability

Modified: 7/1/2026

Modified: 6/10/2026

Modified: 6/10/2026