1314 matches found
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
CVE-2026-59894 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
MLflow Server-Side Request Forgery Vulnerability
MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive responsestatus and responsebody...
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence AI platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology OT and industrial automation, are witnessing malicious scanning and exploitation efforts. According to...
VulnCheck KEV: CVE-2026-64849
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original URL while...
CVE-2026-64849
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:08+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j 2026-08-17 23:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsnmaylb27 2026-08-17...
CVE-2026-69146
creationtimestamp| type| source ---|---|--- 2026-08-17 22:35:05+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5 2026-08-17 23:31:40+00:00| seen| https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a 2026-08-18 00:01:16+00:00|...
CVE-2026-69148
creationtimestamp| type| source ---|---|--- 2026-08-17 22:31:53+00:00| seen| https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47 2026-08-17 22:35:03+00:00| published-proof-of-concept| https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw 2026-08-17 23:47:49+00:00|...
CVE-2026-69148
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...
CVE-2026-69146
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...
CVE-2026-64849
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original URL while...
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Summary The validatesourcerun and validatesourcemodel functions in mlflow/server/handlers.py verify that a model version source path is within the artifact directory of a specified run or logged model, but do not check whether the caller has READ permission on that run or model. An authenticated...
NPM: MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
NPM: MLflow: CreateModelVersion source validation does not check READ permission on referenced runid vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...
GHSA-GQCH-G4W5-7QCW MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Summary The validatesourcerun and validatesourcemodel functions in mlflow/server/handlers.py verify that a model version source path is within the artifact directory of a specified run or logged model, but do not check whether the caller has READ permission on that run or model. An authenticated...