1527 matches found
CVE-2026-59894 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
MLflow Server-Side Request Forgery Vulnerability
MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody...
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence AI platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology OT and industrial automation, are witnessing malicious scanning and exploitation efforts. According to...
VulnCheck KEV: CVE-2026-64849
MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody...
CVE-2026-64849
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:08+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j 2026-08-17 23:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsnmaylb27 2026-08-17...
CVE-2026-69146
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:05+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5 2026-08-17 23:31:40+00:00| seen| https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a 2026-08-18 00:01:16+00:00|...
CVE-2026-69148
creationtimestamp| type| source ---|---|--- 2026-08-17 22:31:53+00:00| seen| https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47 2026-08-17 22:35:03+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw 2026-08-17 23:47:49+00:00|...
CVE-2026-69146
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
CVE-2026-69148
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...
CVE-2026-64849
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original URL while...
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Summary The validatesourcerun and validatesourcemodel functions in mlflow/server/handlers.py verify that a model version source path is within the artifact directory of a specified run or logged model, but do not check whether the caller has READ permission on that run or model. An authenticated...
NPM: MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
NPM: MLflow: CreateModelVersion source validation does not check READ permission on referenced runid vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...
Missing Authorization
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Missing Authorization via the CreateModelVersion endpoint, which...
GHSA-GQCH-G4W5-7QCW MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Summary The validatesourcerun and validatesourcemodel functions in mlflow/server/handlers.py verify that a model version source path is within the artifact directory of a specified run or logged model, but do not check whether the caller has READ permission on that run or model. An authenticated...
NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...
GHSA-3P64-6GVH-82V5 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
Summary When MLflow is deployed with the built-in basic-auth plugin --app-name basic-auth, any authenticated user can inject arbitrary dataset records into another user's run by calling POST /api/2.0/mlflow/runs/log-inputs. The LogInputs proto handler is absent from the BEFOREREQUESTHANDLERS map ...
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
Summary When MLflow is deployed with the built-in basic-auth plugin --app-name basic-auth, any authenticated user can inject arbitrary dataset records into another user's run by calling POST /api/2.0/mlflow/runs/log-inputs. The LogInputs proto handler is absent from the BEFOREREQUESTHANDLERS map ...
Missing Authorization
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Missing Authorization via the LogInputs and LogOutputs endpoints,...