VulnCheck KEV: CVE-2026-116690

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

Directory Traversal

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Directory Traversal via the createmodelversion handler in...

CVE-2026-116690

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

CVE-2026-116690

MLflow versions 3.10.0 through 3.16.1 are vulnerable to an arbitrary local file read vulnerability. The issue stems from the _create_model_version() function's prompt branch, which fails to perform path validation on schemeless relative sources (e.g., ../../etc) because validation only triggers w...

CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

CVE-2026-116690

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

MLflow path traversal vulnerability

Versions 3.10.0 through 3.17.0 of MLflow contain a path traversal vulnerability. This vulnerability arises because the prompt branch in createmodelversion accepts relative sources without a URL scheme. Path validation is performed only when the source contains a URL scheme. Additionally,...

CVE-2026-116690: Improper Limitation of a Pathname to a Restricted Directory

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

CVE-2026-2614

A vulnerability in the "createmodelversion" handler of "mlflow/server/handlers.py" in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a "CreateModelVersion" request includes the tag...