Skip to content
OpenAdvisories

Vendor

MLflow

89 known vulnerabilities.

Products

mlflow/mlflow 55 MLflow 34
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.2
    CVE-2026-53995 Public exploit

    MLflow 3.17.1 and prior Path Traversal via Trace ID API

    MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/t…

    MLflow MLflow mlflow PyPI
  • High 7.1
    CVE-2026-71211 Public exploit

    mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint

    MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/serv…

    MLflow MLflow mlflow PyPI
  • High 8.1
    CVE-2025-11201 Public exploit EPSS 26%

    MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

    MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit …

    MLflow MLflow mlflow PyPI
  • High 7.5
    CVE-2024-2928 Public exploit EPSS 22%

    Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

    A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal s…

    MLflow mlflow/mlflow mlflow PyPI
  • High 8.8
    CVE-2024-37054 Public exploit

    MLFlow unsafe deserialization

    Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.

    MLflow MLflow mlflow PyPI