mlflow vulnerabilities (PyPI)
87 vulnerabilities.
-
mlflowPyPI MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules 9.8 Critical -
mlflowPyPI MLflow CrewAI autologging records LLM provider API keys in logged trace spans 6.5 Medium -
mlflowPyPI MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source 7.5 High -
mlflowPyPI MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints 6.5 Medium -
mlflowPyPI MLflow 3.17.1 and prior Path Traversal via Trace ID API 8.8 High -
mlflowPyPI MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact 8.8 High -
mlflowPyPI MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) 9.3 Critical -
mlflowPyPI mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint 7.1 High -
mlflowPyPI Authorization Bypass in mlflow/mlflow 8.1 High -
mlflowPyPI MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash 2.0 Low -
mlflowPyPI Environment Variable Resolution Vulnerability in mlflow/mlflow 9.1 Critical -
mlflowPyPI Improper Access Control in mlflow/mlflow 6.5 Medium -
mlflowPyPI Missing Authorization Validation in mlflow/mlflow 9.0 Critical -
mlflowPyPI Authorization Bypass in SearchModelVersions in mlflow/mlflow 6.5 Medium -
mlflowPyPI Improper Origin Validation in mlflow/mlflow 9.6 Critical -
mlflowPyPI Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow 7.0 High -
mlflowPyPI Authentication Bypass in mlflow/mlflow 8.6 High -
mlflowPyPI Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow 7.5 High -
mlflowPyPI Server-Side Request Forgery (SSRF) in mlflow/mlflow 7.1 High -
mlflowPyPI Authorization Bypass in MLflow AJAX Endpoint 5.3 Medium -
mlflowPyPI Stored XSS via unsafe YAML parsing in MLflow 5.1 Medium -
mlflowPyPI Missing Authentication for Critical Function in mlflow/mlflow 9.1 Critical -
mlflowPyPI Command Injection in mlflow/mlflow 9.6 Critical -
mlflowPyPI Command Injection in mlflow/mlflow 10.0 Critical -
mlflowPyPI Path Traversal Vulnerability in mlflow/mlflow 9.6 Critical -
mlflowPyPI Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow 8.1 High -
mlflowPyPI Path Traversal Vulnerability in mlflow/mlflow 8.1 High -
mlflowPyPI Command Injection in mlflow/mlflow 7.5 High -
mlflowPyPI MLflow Use of Default Password Authentication Bypass Vulnerability 9.8 Critical -
mlflowPyPI MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability 8.1 High -
mlflowPyPI Privilege Escalation in mlflow/mlflow 7.0 High -
mlflowPyPI DNS Rebinding Vulnerability in mlflow/mlflow 8.1 High -
mlflowPyPI MLflow Weak Password Requirements Authentication Bypass Vulnerability 8.1 High -
mlflowPyPI MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability 8.1 High -
mlflowPyPI MLFlow SSRF via gateway_proxy_handler 5.8 Medium -
mlflowPyPI Denial of Service through Batched Queries in GraphQL in mlflow/mlflow 5.9 Medium -
mlflowPyPI Weak Password Requirements in mlflow/mlflow 3.8 Low -
mlflowPyPI CSRF in mlflow/mlflow 5.4 Medium -
mlflowPyPI Path Traversal in mlflow/mlflow 7.5 High -
mlflowPyPI Uncontrolled Resource Consumption in mlflow/mlflow 5.3 Medium -
mlflowPyPI Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf 7.0 High -
mlflowPyPI Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow 7.5 High -
mlflowPyPI Remote Code Execution due to Full Controlled File Write in mlflow/mlflow 10.0 Critical -
mlflowPyPI Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow 5.4 Medium -
mlflowPyPI MLFlow improper input validation 8.8 High -
mlflowPyPI MLFlow unsafe deserialization 8.8 High -
mlflowPyPI MLFlow unsafe deserialization 8.8 High -
mlflowPyPI MLFlow unsafe deserialization 8.8 High -
mlflowPyPI MLFlow unsafe deserialization 8.8 High -
mlflowPyPI MLFlow unsafe deserialization 8.8 High - Show olderLoading…