Unsafe Dependency Resolution

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Unsafe Dependency Resolution through the model artifact loading...

a2 (>=0.1.0, <=0.3.17), abadpour (>=6.13.1, <=7.24.1) +978 more potentially affected by CVE-2026-79721 via mlflow (>=0.8.2, <=3.16.1)

mlflow PYPI version =0.8.2, =0.1.0, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.4.4, =0.0.5, =1.0.0, =0.1.0, =0.1.42, =0.1.44 - aidevelopementtoolkit 0.2.0 and more Source cves: CVE-2026-79721 Source advisory: SNYK:PYTHON-MLFLOW-19653590...

CVE-2026-79721

MLflow platform (version 0.0.1 or newer ) is vulnerable to arbitrary code execution via a maliciously crafted model artifact . When an end user loads a tampered artifact into a project, it can execute attacker-controlled code on their system. The CNA-assigned CVSS 4.0 score is 8.6 (HIGH) , reflec...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

EUVD-2026-74038

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-79721: Inclusion of Functionality from Untrusted Control Sphere

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

PT-2026-88276

Name of the Vulnerable Software and Affected Versions MLflow versions 0.0.1 and newer Description An issue exists where a maliciously crafted model artifact can execute arbitrary code on an end user's system when it is loaded by the project. Recommendations At the moment, there is no information...

Exploit for Server-Side Request Forgery in Lfprojects Mlflow

Laboratorio de Seguridad — Explotación de SSRF en MLflow Webho...

CLSA-2026-1788334607 TuxCare security update for mlflow (1 CVE)

TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post8+tuxcare...

PT-2026-90628

TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post8+tuxcare...

MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact

Summary MLflow introduced MLFLOWALLOWPICKLEDESERIALIZATION as a security control to prevent unsafe pickle.load execution during model loading, in response to CVE-2024-37052 through CVE-2024-37060. When set to False, operators expect all pickle deserialization to be blocked. The most recent relate...

Deserialization of Untrusted Data

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadmodel and loadpyfunc...

GHSA-GQVG-GMMX-X4HM MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact

Summary MLflow introduced MLFLOWALLOWPICKLEDESERIALIZATION as a security control to prevent unsafe pickle.load execution during model loading, in response to CVE-2024-37052 through CVE-2024-37060. When set to False, operators expect all pickle deserialization to be blocked. The most recent relate...

VulnCheck KEV: CVE-2026-2614

A vulnerability in the createmodelversion handler of mlflow/server/handlers.py in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a CreateModelVersion request includes the tag...

CLSA-2026-1787902504 TuxCare security update for mlflow (2 CVEs)

TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post7+tuxcare...

PT-2026-86745

TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post7+tuxcare...

CVE-2026-71211

A flaw was found in MLflow's AI Gateway where an unvalidated apibase value in a gateway secret could lead to a Server-Side Request Forgery SSRF vulnerability. An authenticated user, even with read-only privileges, can create a secret with an internal network address. This allows the gateway proxy...

Malicious Package

Overview mlflow-otel-instrumentor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in mlflow-otel-instrumentor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cc23ea60cf80f9bf13850e8222ee1cbb7a89643362c703eb402eef08d908c Package metadata impersonates AWS author "AWS Support Team", email [email protected], homepage https://aws.amazon.com/ while the actual payload is...