9244 matches found
PT-2026-97414
Name of the Vulnerable Software and Affected Versions MLflow versions 2.1.0 through 3.14.0 Description The statsmodel flavor in MLflow fails to implement the MLFLOW ALLOW PICKLE DESERIALIZATION=False security control within the load model function. This omission allows a remote attacker to execut...
CLSA-2026-1789728540 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post10+tuxcare...
PT-2026-102282
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post10+tuxcare...
BIT-MLFLOW-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
kedro-azureml (0.9.0), kedro-graphql (>=1.1.0, <=1.5.1) +4 more potentially affected by CVE-2026-62997 via kedro-datasets (7.0.0)
kedro-datasets PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kedro-datasets and may be impacted: - kedro-azureml 0.9.0 - kedro-graphql =1.1.0, =0.12.2, =0.7.0, =0.1.0, =0.1.3 Source cves: CVE-2026-62997 Source advisory:...
CVE-2026-69249 vulnerabilities
Vulnerabilities for packages: kserve, mlflow, az...
GHSA-JWV3-5HGF-82WW vulnerabilities
Vulnerabilities for packages: kserve, mlflow, az...
GHSA-M2H6-J472-RP4C vulnerabilities
Vulnerabilities for packages: kserve, mlflow, az...
CVE-2026-69248 vulnerabilities
Vulnerabilities for packages: kserve, mlflow, az...
MLflow dspy and statsmodels flavors bypass pickle deserialization control
Overview Two vulnerabilities in MLflow’s dspy and statsmodels model flavors allow unauthorized pickle deserialization executions despite a safety control. Specifically, the dspy flavor conditionally applies the control based on the model path’s file extension, and the statsmodels flavor does not...
CLSA-2026-1789465756 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post9+tuxcare...
PT-2026-99026
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post9+tuxcare...
CVE-2026-76220 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
PYSEC-2026-3865 MLflow AI Gateway permits SSRF through an unvalidated api_base
MLflow's AI Gateway accepts an authconfig.apibase value when creating a gateway secret mlflow/server/handlers.py, creategatewaysecret with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint mlflow/server/gatewayapi.py, rawproxy subsequently issues...
MLflow AI Gateway permits SSRF through an unvalidated api_base
MLflow's AI Gateway accepts an authconfig.apibase value when creating a gateway secret mlflow/server/handlers.py, creategatewaysecret with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint mlflow/server/gatewayapi.py, rawproxy subsequently issues...
azureml-acft-image-components (>=0.0.7, <=0.0.45), azureml-evaluate-mlflow (>=0.0.0, <=0.0.91) +8 more potentially affected by CVE-2026-71211 via mlflow (>=3.14.0, <=3.15.2)
mlflow PYPI version =3.14.0, =0.0.7, =0.0.0, =0.9.1, =0.6.0, =0.2.9, =1.4.0, =1.0.9, =1.0.7, =1.0.12 Source cves: CVE-2026-71211 Source advisory: OSV:PYSEC-2026-3865...
auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-9856 via transformers (4.25.1)
transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: checkov, awx, mlflow, datahub-ingestion, mlflow-fips, opal, datahub-ingestion-fips...