Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Mlflow
Mlflow/mlflow

Mlflow Mlflow/mlflow vulnerabilities

lfprojects mlflow, mlflow mlflow/mlflow +1 moreAuthorization Bypass in mlflow/mlflowCVE-2026-8147Fix available8.1 HighJuly 2, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreEnvironment Variable Resolution Vulnerability in mlflow/mlflowCVE-2026-4035Fix available9.1 CriticalJune 3, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Access Control in mlflow/mlflowCVE-2026-3198Fix available6.5 MediumJune 2, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreMissing Authorization Validation in mlflow/mlflowCVE-2026-2651Fix available9.0 CriticalMay 25, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreAuthorization Bypass in SearchModelVersions in mlflow/mlflowCVE-2026-2734Fix available6.5 MediumMay 21, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreImproper Origin Validation in mlflow/mlflowCVE-2026-2611Fix available9.6 CriticalMay 19, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreIncomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflowCVE-2026-4137Fix available7.0 HighMay 18, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreAuthentication Bypass in mlflow/mlflowCVE-2026-2652Fix availableEPSS 20.8%8.6 HighMay 15, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more +4 moreArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflowCVE-2026-2614Fix available7.5 HighMay 11, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreServer-Side Request Forgery (SSRF) in mlflow/mlflowCVE-2026-2393Fix available7.1 HighMay 11, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +1 more +3 moreMissing Authentication for Critical Function in mlflow/mlflowCVE-2026-05459.1 CriticalApril 3, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreCommand Injection in mlflow/mlflowCVE-2026-0596Public exploitFix available9.6 CriticalMarch 31, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflowCVE-2025-15379Fix available10.0 CriticalMarch 30, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2025-15036Fix available9.6 CriticalMarch 30, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreUnauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflowCVE-2025-15381Fix available8.1 HighMarch 27, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2025-15031Fix available8.1 HighMarch 18, 2026
lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 moreCommand Injection in mlflow/mlflowCVE-2025-14287Fix available7.5 HighMarch 15, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 morePrivilege Escalation in mlflow/mlflowCVE-2025-10279Fix available7.0 HighFebruary 2, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreDNS Rebinding Vulnerability in mlflow/mlflowCVE-2025-14279Fix available8.1 HighJanuary 12, 2026
lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service through Batched Queries in GraphQL in mlflow/mlflowCVE-2025-0453Fix availableEPSS 11.3%5.9 MediumMarch 20, 2025
lfprojects mlflow, mlflow mlflow/mlflow +1 moreWeak Password Requirements in mlflow/mlflowCVE-2025-1474Fix available3.8 LowMarch 20, 2025
lfprojects mlflow, mlflow mlflow/mlflow +1 moreCSRF in mlflow/mlflowCVE-2025-1473Fix available5.4 MediumMarch 20, 2025
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflowCVE-2024-8859Public exploitFix available7.5 HighMarch 20, 2025
lfprojects mlflow, mlflow mlflow/mlflow +1 moreUncontrolled Resource Consumption in mlflow/mlflowCVE-2024-6838Fix available5.3 MediumMarch 20, 2025
lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowCVE-2024-2928Public exploitFix availableEPSS 21.8%7.5 HighJune 6, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 moreRemote Code Execution due to Full Controlled File Write in mlflow/mlflowCVE-2024-0520Public exploitFix available10.0 CriticalJune 6, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflowCVE-2024-3099Fix available5.4 MediumJune 6, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Access Control in mlflow/mlflowCVE-2024-4263Fix available5.4 MediumMay 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Bypass in mlflow/mlflowCVE-2024-3848Fix availableEPSS 43.0%7.5 HighMay 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Inclusion (LFI) via Scheme Confusion in mlflow/mlflowCVE-2024-3573Fix available9.3 CriticalApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 moreLocal File Read via Path Traversal in mlflow/mlflowCVE-2024-1594Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal via Parameter Smuggling in mlflow/mlflowCVE-2024-1593Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1558Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow, mflow +2 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1483Fix available7.5 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal Vulnerability in mlflow/mlflowCVE-2024-1560Fix available8.1 HighApril 16, 2024
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6977Fix available10.0 CriticalDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreUnrestricted Upload of File with Dangerous TypeCVE-2023-6976Fix available8.8 HighDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename'CVE-2023-6975Fix available9.8 CriticalDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreServer-Side Request Forgery (SSRF)CVE-2023-6974Fix available8.6 HighDecember 20, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreCommand InjectionCVE-2023-6940Fix available9.0 CriticalDecember 19, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6909Fix availableEPSS 89.7%7.5 HighDecember 18, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-6831Fix available8.1 HighDecember 15, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal in mlflow/mlflowCVE-2023-6753Fix available9.6 CriticalDecember 13, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflowCVE-2023-6709Fix available10.0 CriticalDecember 12, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreReflected XSS via Content-Type Header in mlflow/mlflowCVE-2023-6568Fix available6.5 MediumDecember 7, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Authentication BypassCVE-2023-6014Fix available9.1 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File UploadCVE-2023-6015Fix available10.0 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File WriteCVE-2023-6018Fix availableEPSS 47.9%10.0 CriticalNovember 16, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreOS Command Injection in mlflow/mlflowCVE-2023-4033Fix available8.8 HighAugust 1, 2023
lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflowCVE-2023-3765Fix availableEPSS 67.3%10.0 CriticalJuly 19, 2023
Show olderLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open