CVE-2024-3099

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service DoS as an authenticated user might not be able to use the intended model, as it will open a different model each time...

CVE-2023-1177

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-6909

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

CVE-2023-30172

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter...

CVE-2023-2356

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...

CVE-2023-1176

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2...

CVE-2023-6014

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment...

CVE-2023-6018

An attacker can overwrite any file on the server hosting MLflow without any authentication...

CVE-2023-6568

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

CVE-2023-3765

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0...

CVE-2023-6015

MLflow allowed arbitrary files to be PUT onto the server...

CVE-2023-6831

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

CVE-2023-2780

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

CVE-2023-43472

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API...

CVE-2025-47278 vulnerabilities

Vulnerabilities for packages: emissary, mlflow, airflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app...

GHSA-4GRG-W6V8-C28G vulnerabilities

Vulnerabilities for packages: emissary, mlflow, airflow, kubeflow-volumes-web-app, kubeflow-jupyter-web-app...

GHSA-4GRG-W6V8-C28G vulnerabilities

Vulnerabilities for packages: airflow-core, kubeflow-volumes-web-app, pgadmin4, nemo, mlflow, airflow, kubeflow-jupyter-web-app, emissary...

CVE-2025-47278 vulnerabilities

Vulnerabilities for packages: airflow-core, kubeflow-volumes-web-app, pgadmin4, nemo, mlflow, airflow, kubeflow-jupyter-web-app, emissary...

Exploit for Path Traversal in Lfprojects Mlflow

MLflow CVE-2023-1177 - PoC & Reproduce Repo này chứa mã khai...

BIT-MLFLOW-2025-0453 Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to...