9244 matches found
Malicious Package
Overview mlflow-otel-instrumentor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MAL-2026-14384 Malicious code in mlflow-otel-instrumentor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c Package metadata impersonates AWS author "AWS Support Team", email [email protected], homepage https://aws.amazon.com/ while the actual payload is...
Malicious code in mlflow-otel-instrumentor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c Package metadata impersonates AWS author "AWS Support Team", email [email protected], homepage https://aws.amazon.com/ while the actual payload is...
BIT-MLFLOW-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...
BIT-MLFLOW-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
CLSA-2026-1787296483 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post6+tuxcare...
BIT-MLFLOW-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original U...
MLflow < 3.15.0 SSRF (CVE-2026-64849)
The version of MLflow installed on the remote host is prior to 3.15.0. It is, therefore, affected by a server-side request forgery vulnerability: - The unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl only for the original URL while the webhook delivery...
mlflow/utils/validation.py SSRF
The vulnerability of the validatewebhookurl function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform is related to insufficient validation of server-side requests. Exploiting this vulnerability could allow an attacker to perform an SSRF attack and gain...
PT-2026-79963
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE REQUEST HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inpu...
PT-2026-79962
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validate webhook url in mlflow/utils/validation.py only for the original URL while...
PT-2026-83756
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post6+tuxcare...
PT-2026-79964
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run id or model id after validate source run or validate source model in mlflow/server/handlers.py verifies only path containment, allowin...
CLSA-2026-1787213730 TuxCare security update for mlflow (4 CVEs)
TuxCare rebuilt mlflow to address 4 CVEs. Fixed in 2.9.1.post5+tuxcare...
CVE-2026-64849
A flaw was found in MLflow. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by sending a specially crafted request to the webhook test endpoint. This occurs because the system validates only the initial URL, but then follows unvalidated HTTP...
PT-2026-83533
TuxCare rebuilt mlflow to address 4 CVEs. Fixed in 2.9.1.post5+tuxcare...
Exploit for CVE-2026-64849
id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthen...
CLSA-2026-1787146516 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.22.4.post7+tuxcare...
iqradre (>=0.1.5, <=0.2.1) potentially affected by CVE-2026-64849 via mlflow (1.20.0)
mlflow PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - iqradre =0.1.5, =0.2.1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2026-64849 via mlflow (2.0.0rc0)
mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...