9256 matches found
EUVD-2026-104633
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
GHSA-WQMH-QCCW-PQWF MLflow FileStore trace IDs allow path traversal and arbitrary file writes
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
CVE-2026-53995
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
CVE-2026-53995
A flaw was found in MLflow. An unauthenticated remote attacker can achieve arbitrary file write by submitting a crafted trace identifier containing path traversal sequences to the FileStore tracking backend. This vulnerability allows the attacker to write metadata files outside the intended...
CVE-2026-53995 MLflow 3.17.1 and prior Path Traversal via Trace ID API
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
CVE-2026-53995
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
CVE-2026-53995 MLflow 3.17.1 and prior Path Traversal via Trace ID API
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
CVE-2026-53995
MLflow versions 3.17.1 and earlier are vulnerable to a path traversal vulnerability in the FileStore tracking backend. An unauthenticated remote attacker can submit a crafted trace ID containing traversal sequences (e.g., ../) to the POST /api/3.0/mlflow/traces endpoint. By exploiting FileStore.s...
CVE-2026-53995 MLflow 3.17.1 and prior Path Traversal via Trace ID API
MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/traces endpoint. Attackers can exploit...
PT-2026-117661
Name of the Vulnerable Software and Affected Versions MLflow versions prior to 3.17.2 Description The FileStore tracking backend contains a path traversal issue. Unauthenticated attackers can control filesystem paths by submitting a crafted trace ID containing traversal sequences to the 'POST...
MLFlow path traversal vulnerability
MLflow versions 3.17.1 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of trace IDs by the FileStore tracking backend. Unauthenticated attackers can submit a specially crafted trace ID containing a traversal sequence to the POST...
Exploit for CVE-2026-53995
CVE-2026-53995: MLflow starttracev3 - TraceInfo.from...
WS-2026-0135
mlflow 3.12.0rc0 - 3.16.1: third-party scorer deserialization allow-lists modules by package prefix, so an unauthenticated caller can upload a run artifact under an allowed scorer package and have the server import and execute it remote code execution GHSA-26p8-2jq9-3vq9...
CLSA-2026-1791448365 TuxCare security update for mlflow (2 CVEs)
TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post13+tuxcare...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses mlflow-3.11.1-py3-none-any.whl, nltk-3.10.0-py3-none-any.whl, gitpython-3.1.53-py3-none-any.whl, and glib2 2.68.4-19.el98.1 which are vulnerable to CVE-2026-64849, CVE-2026-69148, CVE-2026-79657, CVE-2026-79674, CVE-2026-79675, CVE-2026-79676, CVE-2026-78675,...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses transformers-5.8.0-py3-none-any.whl, mlflow-3.11.1-py3-none-any.whl, sqlparse-0.5.4-py3-none-any.whl, nltk-3.10.0-py3-none-any.whl, gitpython-3.1.53-py3-none-any.whl, and cryptography-46.0.7-cp311-abi3-macosx109universal2.whl which are vulnerable to CVE-2026-80047,...
GHSA-94P9-XGH2-XP45 vulnerabilities
Vulnerabilities for packages: mlflow, mlflow-fips, py3-cassandra-medusa, request-1276...
GHSA-9H9J-4VRJ-GF7G vulnerabilities
Vulnerabilities for packages: mlflow, py3-cassandra-medusa, request-1276...