Skip to content
OpenAdvisories

Product · MLflow

mlflow/mlflow

55 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-3198

    Improper Access Control in mlflow/mlflow

    MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `Li…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 6.5
    CVE-2026-2734

    Authorization Bypass in SearchModelVersions in mlflow/mlflow

    In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumera…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.9
    CVE-2025-0453 EPSS 11%

    Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

    In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.4
    CVE-2025-1473

    CSRF in mlflow/mlflow

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malici…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.3
    CVE-2024-6838

    Uncontrolled Resource Consumption in mlflow/mlflow

    In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unrespon…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.4
    CVE-2024-3099

    Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow

    A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.4
    CVE-2024-4263

    Improper Access Control in mlflow/mlflow

    A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by…

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 6.5
    CVE-2023-6568 Scanner template

    Reflected XSS via Content-Type Header in mlflow/mlflow

    A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is …

    MLflow mlflow/mlflow mlflow PyPI
  • Medium 5.3
    CVE-2023-1176

    Absolute Path Traversal in mlflow/mlflow

    Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

    MLflow mlflow/mlflow mlflow PyPI