mlflow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-10803Lowmlflow: MLflow: Deterministic sampling in dataset digest enables predictable collisions CVE-2026-4035Criticalmlflow: MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration CVE-2026-3198Mediummlflow: MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions CVE-2026-2651Criticalmlflow: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled CVE-2026-2734Mediummlflow: MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks CVE-2026-2611Criticalmlflow: MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution CVE-2026-4137Highmlflow: MLFlow Creates a Temporary File With Insecure Permissions CVE-2026-2652Highmlflow: MLflow: unauthenticated access to certain FastAPI routes CVE-2026-2614Highmlflow: MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem CVE-2026-2393Highmlflow: MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-33866Mediummlflow: MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint CVE-2026-33865Mediummlflow: MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface CVE-2026-0545Criticalmlflow: mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization CVE-2026-0596Criticalmlflow: Mlflow: Command Injection when serving models with enable_mlserver=True CVE-2025-15379Criticalmlflow: MLflow Command Injection vulnerability CVE-2025-15036Criticalmlflow: MLFlow path traversal vulnerability CVE-2025-15381Highmlflow: MLFlow allows Tracing + Assessments Access CVE-2025-15031Highmlflow: Arbitrary file write via tar traversal in mlflow CVE-2025-14287Highmlflow: MLflow has a command injection in mlflow/sagemaker/__init__.py CVE-2026-2635Criticalmlflow: MLflow Use of Default Password Authentication Bypass Vulnerability CVE-2026-2033Highmlflow: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability CVE-2025-10279Highmlflow: mlflow Creates of Temporary File in Directory with Insecure Permissions CVE-2025-14279Highmlflow: MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation CVE-2025-11200Highmlflow: MLflow Weak Password Requirements Authentication Bypass Vulnerability CVE-2025-11201Highmlflow: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.