CVE-2026-42215 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, awx, mlflow-fips, opal, open-webui, checkov...

CVE-2026-42284 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, awx, mlflow-fips, opal, open-webui, checkov...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: mlflow, superset, prefect-fips, open-webui, jupyter-base-notebook, nemo, airflow-core, dagster, pgadmin4-fips, airflow, dagster-fips...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, open-webui, datahub-ingestion, pgadmin4-fips, airflow...

CVE-2026-42215 vulnerabilities

Vulnerabilities for packages: open-webui, checkov, mlflow...

CVE-2026-42284 vulnerabilities

Vulnerabilities for packages: open-webui, checkov, mlflow...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: superset, mlflow, jupyter-base-notebook, airflow, open-webui...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

VulnCheck KEV: CVE-2023-6909

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

BIT-MLFLOW-2025-15379 Command Injection in mlflow/mlflow

A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the installmodeldependenciestoenv function. When deploying a model with envmanager=LOCAL, MLflow reads dependency specifications from the model artifact's pythonenv.yaml file and...

BIT-MLFLOW-2025-15036 Path Traversal Vulnerability in mlflow/mlflow

A path traversal vulnerability exists in the extractarchivetodir function within the mlflow/pyfunc/dbconnectartifactcache.py file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An...

GHSA-46R5-X6JQ-V8G6 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-33866 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-33865 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-FH64-R2VC-XVHR vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-46R5-X6JQ-V8G6 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

CVE-2026-33865 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

GHSA-FH64-R2VC-XVHR vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

CVE-2026-33866 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

BIT-MLFLOW-2026-33866 Authorization Bypass in MLflow AJAX Endpoint

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to...