GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-67322 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-76217 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-71211 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

GHSA-H7X2-H6G9-P789 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

Unsafe Dependency Resolution

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Unsafe Dependency Resolution through the model artifact loading...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

EUVD-2026-74038

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-79721

MLflow platform (version 0.0.1 or newer ) is vulnerable to arbitrary code execution via a maliciously crafted model artifact . When an end user loads a tampered artifact into a project, it can execute attacker-controlled code on their system. The CNA-assigned CVSS 4.0 score is 8.6 (HIGH) , reflec...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-79721: Inclusion of Functionality from Untrusted Control Sphere

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

PT-2026-88276

Name of the Vulnerable Software and Affected Versions MLflow versions 0.0.1 and newer Description An issue exists where a maliciously crafted model artifact can execute arbitrary code on an end user's system when it is loaded by the project. Recommendations At the moment, there is no information...

Exploit for Server-Side Request Forgery in Lfprojects Mlflow

Laboratorio de Seguridad — Explotación de SSRF en MLflow Webho...

CLSA-2026-1788334607 TuxCare security update for mlflow (1 CVE)

TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post8+tuxcare...

PT-2026-90628

TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post8+tuxcare...

abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +265 more potentially affected by CVE-2026-96775 +1 more via mlflow (>=2.1.1, <=3.14.0)

mlflow PYPI version =2.1.1, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775, CVE-2026-96804 Source advisory: SNYK:PYTHON-MLFLOW-19500672...