#mlflow
6 articles
CVE-2026-64849: Actively exploited SSRF in MLflow (CISA KEV)
MLflow's unauthenticated webhook test endpoint validates only the original URL and then follows redirects, opening an SSRF...
CVE-2026-2651: Broken access control in MLflow artifact upload
A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce r...
CVE-2026-2611: Improper origin validation RCE in MLflow Assistant
In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests fro...
CVE-2026-0545: Unauthenticated RCE via job endpoints in MLflow
In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the lates...
CVE-2025-15036: Path traversal in MLflow extract_archive_to_dir
A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present ...
CVE-2025-15379: Command injection in MLflow model serving
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_...