GHSA-FJ7V-R99M-22GQ vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow-fips, awx, opal, jupyter-all-spark-notebook, datahub-ingestion, datahub-ingestion-fips, mlflow...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: mlflow-fips, awx, opal, jupyter-all-spark-notebook, datahub-ingestion, datahub-ingestion-fips, mlflow...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: mlflow-fips, awx, opal, jupyter-all-spark-notebook, datahub-ingestion, datahub-ingestion-fips, mlflow...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: mlflow-fips, awx, opal, jupyter-all-spark-notebook, datahub-ingestion, datahub-ingestion-fips, mlflow...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow-fips, awx, opal, jupyter-all-spark-notebook, datahub-ingestion, datahub-ingestion-fips, mlflow...

MAL-2026-10779 Malicious code in mlflow-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...

PYSEC-2026-2659 MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MLflow 3.9.0 with basic-auth --app-name basic-auth fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the BEFOREREQUESTHANDLERS dictionary in mlflow/server/auth/init.py does not include entries for ListGatewaySecretInfos, ListGatewayEndpoints, and...

PYSEC-2026-2655 MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

PYSEC-2026-2654 MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

A vulnerability in the createmodelversion handler of mlflow/server/handlers.py in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a CreateModelVersion request includes the tag...

PYSEC-2026-2657 MLFlow allows Tracing + Assessments Access

In the latest version of mlflow/mlflow, when the basic-auth app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with NOPERMISSIONS on the experiment, to read trace information and create assessments for...

PYSEC-2026-2656 Arbitrary file write via tar traversal in mlflow

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of tarfile.extractall without path validation enables crafted tar.gz files containing .. or absolute paths to escape the intended extractio...

PYSEC-2026-2661 MLflow has a command injection in mlflow/sagemaker/__init__.py

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/init.py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, whic...

PYSEC-2026-2658 MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific fla...

CVE-2026-8147

A flaw was found in MLflow. When authentication is enabled, any authenticated user can bypass experiment-level authorization controls on trace API endpoints. This is due to missing authorization validators, allowing unauthorized reading, deleting, and modifying of traces. This vulnerability can...

PYSEC-2026-1639 mlflow Creates of Temporary File in Directory with Insecure Permissions

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions 0o777. This vulnerability allows an attacker with write access to the /tmp directory to exploit a race condition and overwrite .py files in the virtual...

PYSEC-2026-1640 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw...