mlflow mlflow/mlflow
55 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-8147 | unspecified – < 3.14.0 | Authorization Bypass in mlflow/mlflow | HIGH 8.1 | 0.5 % | ||
| CVE-2026-4035 | unspecified – < 3.11.0 | Environment Variable Resolution Vulnerability in mlflow/mlflow | HIGH 7.7 | 0.5 % | ||
| CVE-2026-3198 | unspecified – latest | Improper Access Control in mlflow/mlflow | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-2651 | unspecified – < 3.10.0 | Missing Authorization Validation in mlflow/mlflow | CRITICAL 9.0 | 0.3 % | ||
| CVE-2026-2734 | unspecified – < 3.10.0 | Authorization Bypass in SearchModelVersions in mlflow/mlflow | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-2611 | unspecified – < 3.10.0 | Improper Origin Validation in mlflow/mlflow | CRITICAL 9.6 | 0.4 % | ||
| CVE-2026-4137 | unspecified – < 3.11.0 | Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow | HIGH 7.8 | 0.2 % | ||
| CVE-2026-2652 | unspecified – < 3.10.0 | Authentication Bypass in mlflow/mlflow | HIGH 8.6 | 21 % | ||
| CVE-2026-2614 | unspecified – < 3.10.0 | Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow | HIGH 7.5 | 3.7 % | ||
| CVE-2026-2393 | unspecified – < 3.10.0 | Server-Side Request Forgery (SSRF) in mlflow/mlflow | HIGH 7.1 | 0.3 % | ||
| CVE-2026-0545 | unspecified – latest | Missing Authentication for Critical Function in mlflow/mlflow | CRITICAL 9.8 | 4.4 % | ||
| CVE-2026-0596 | unspecified – latest | Command Injection in mlflow/mlflow | CRITICAL 9.6 | 1.4 % | ||
| CVE-2025-15379 | unspecified – < 3.8.2 | Command Injection in mlflow/mlflow | CRITICAL 10.0 | 2.4 % | ||
| CVE-2025-15036 | unspecified – < 3.9.0 | Path Traversal Vulnerability in mlflow/mlflow | CRITICAL 10.0 | 0.6 % | ||
| CVE-2025-15381 | unspecified – latest | Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow | HIGH 8.1 | 0.3 % | ||
| CVE-2025-15031 | unspecified – latest | Path Traversal Vulnerability in mlflow/mlflow | CRITICAL 9.1 | 0.9 % | ||
| CVE-2025-14287 | unspecified – latest | Command Injection in mlflow/mlflow | HIGH 8.8 | 1.5 % | ||
| CVE-2025-10279 | unspecified – < 3.4.0 | Privilege Escalation in mlflow/mlflow | HIGH 7.0 | 0.2 % | ||
| CVE-2025-14279 | unspecified – < 3.5.0 | DNS Rebinding Vulnerability in mlflow/mlflow | HIGH 8.1 | 0.2 % | ||
| CVE-2025-0453 | unspecified – latest | Denial of Service through Batched Queries in GraphQL in mlflow/mlflow | HIGH 7.5 | 11 % | ||
| CVE-2025-1474 | unspecified – < 2.19.0 | Weak Password Requirements in mlflow/mlflow | MEDIUM 5.5 | 0.4 % | ||
| CVE-2025-1473 | unspecified – < 2.20.2 | CSRF in mlflow/mlflow | HIGH 7.1 | 0.2 % | ||
| CVE-2024-8859 | unspecified – < 2.17.0 | Path Traversal in mlflow/mlflow | HIGH 7.5 | 2.8 % | ||
| CVE-2024-6838 | unspecified – latest | Uncontrolled Resource Consumption in mlflow/mlflow | MEDIUM 5.3 | 0.7 % | ||
| CVE-2024-2928 | unspecified – < 2.11.3 | Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow | HIGH 7.5 | 22 % | ||
| CVE-2024-0520 | unspecified – < 2.9.0 | Remote Code Execution due to Full Controlled File Write in mlflow/mlflow | CRITICAL 10.0 | 2.4 % | ||
| CVE-2024-3099 | unspecified – latest | Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow | MEDIUM 5.4 | 0.4 % | ||
| CVE-2024-4263 | unspecified – < 2.10.1 | Improper Access Control in mlflow/mlflow | MEDIUM 5.4 | 0.3 % | ||
| CVE-2024-3848 | unspecified – < 2.12.1 | Path Traversal Bypass in mlflow/mlflow | HIGH 7.5 | 43 % | ||
| CVE-2024-3573 | unspecified – < 2.10.0 | Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow | CRITICAL 9.3 | 0.7 % | ||
| CVE-2024-1594 | unspecified – latest | Local File Read via Path Traversal in mlflow/mlflow | HIGH 7.5 | 0.7 % | ||
| CVE-2024-1593 | unspecified – latest | Path Traversal via Parameter Smuggling in mlflow/mlflow | HIGH 7.5 | 0.7 % | ||
| CVE-2024-1558 | unspecified – latest | Path Traversal Vulnerability in mlflow/mlflow | HIGH 7.5 | 0.9 % | ||
| CVE-2024-1483 | unspecified – latest | Path Traversal Vulnerability in mlflow/mlflow | HIGH 7.5 | 2.7 % | ||
| CVE-2024-1560 | unspecified – latest | Path Traversal Vulnerability in mlflow/mlflow | HIGH 8.1 | 0.9 % | ||
| CVE-2023-6977 | unspecified – < 2.9.2 | Path Traversal: '\..\filename' | CRITICAL 10.0 | 3.9 % | ||
| CVE-2023-6976 | unspecified – < 2.9.2 | Unrestricted Upload of File with Dangerous Type | HIGH 8.8 | 1.0 % | ||
| CVE-2023-6975 | unspecified – < 2.9.2 | Path Traversal: '\..\filename' | CRITICAL 9.8 | 2.0 % | ||
| CVE-2023-6974 | unspecified – < 2.9.2 | Server-Side Request Forgery (SSRF) | CRITICAL 9.8 | 1.5 % | ||
| CVE-2023-6940 | unspecified – < 2.9.2 | Command Injection | CRITICAL 9.0 | 1.2 % | ||
| CVE-2023-6909 | unspecified – < 2.9.2 | Path Traversal: '\..\filename' in mlflow/mlflow | HIGH 7.5 | 90 % | ||
| CVE-2023-6831 | unspecified – < 2.9.2 | Path Traversal: '\..\filename' in mlflow/mlflow | HIGH 8.1 | 3.3 % | ||
| CVE-2023-6753 | unspecified – < 2.9.2 | Path Traversal in mlflow/mlflow | CRITICAL 9.6 | 1.1 % | ||
| CVE-2023-6709 | unspecified – < 2.9.2 | Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow | CRITICAL 10.0 | 0.9 % | ||
| CVE-2023-6568 | unspecified – < 2.9.0 | Reflected XSS via Content-Type Header in mlflow/mlflow | MEDIUM 6.5 | 1.7 % | ||
| CVE-2023-6014 | unspecified – latest | MLflow Authentication Bypass | CRITICAL 9.8 | 1.2 % | ||
| CVE-2023-6015 | unspecified – latest | MLflow Arbitrary File Upload | CRITICAL 10.0 | 4.5 % | ||
| CVE-2023-6018 | unspecified – latest | MLflow Arbitrary File Write | CRITICAL 10.0 | 48 % | ||
| CVE-2023-4033 | unspecified – < 2.6.0 | OS Command Injection in mlflow/mlflow | HIGH 8.8 | 1.3 % | ||
| CVE-2023-3765 | unspecified – < 2.5.0 | Absolute Path Traversal in mlflow/mlflow | CRITICAL 10.0 | 68 % | ||
| CVE-2023-2780 | unspecified – < 2.3.1 | Path Traversal: '\..\filename' in mlflow/mlflow | CRITICAL 9.8 | 6.4 % | ||
| CVE-2023-2356 | unspecified – < 2.3.1 | Relative Path Traversal in mlflow/mlflow | CRITICAL 10.0 | 4.2 % | ||
| CVE-2023-1177 | unspecified – < 2.2.1 | Path Traversal: '\..\filename' in mlflow/mlflow | CRITICAL 9.8 | 70 % | ||
| CVE-2023-1176 | unspecified – < 2.2.2 | Absolute Path Traversal in mlflow/mlflow | MEDIUM 5.3 | 0.6 % | ||
| CVE-2022-0736 | unspecified – < 1.23.1 | Insecure Temporary File in mlflow/mlflow | HIGH 8.2 | 1.6 % |