Vulnerabilities in mlflow
89 resultsCVE-2024-0520CRITICALRemote Code Execution due to Full Controlled File Write in mlflow/mlflowEPSS 2.4%CVE-2023-6975CRITICALPath Traversal: '\..\filename'EPSS 2.0%CVE-2026-2033HIGHMLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2026-116690HIGHMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourceEPSS 1.8%CVE-2023-6568MEDIUMReflected XSS via Content-Type Header in mlflow/mlflowEPSS 1.7%CVE-2022-0736HIGHInsecure Temporary File in mlflow/mlflowEPSS 1.6%CVE-2023-6974HIGHServer-Side Request Forgery (SSRF)EPSS 1.5%CVE-2025-14287HIGHCommand Injection in mlflow/mlflowEPSS 1.5%CVE-2025-11200HIGHMLflow Weak Password Requirements Authentication Bypass VulnerabilityEPSS 1.4%CVE-2026-0596CRITICALCommand Injection in mlflow/mlflowEPSS 1.4%CVE-2023-4033HIGHOS Command Injection in mlflow/mlflowEPSS 1.3%CVE-2023-6940CRITICALCommand InjectionEPSS 1.2%CVE-2023-6014CRITICALMLflow Authentication BypassEPSS 1.2%CVE-2023-6753CRITICALPath Traversal in mlflow/mlflowEPSS 1.1%CVE-2026-2635HIGHMLflow Use of Default Password Authentication Bypass VulnerabilityEPSS 1.1%CVE-2023-6976HIGHUnrestricted Upload of File with Dangerous TypeEPSS 1.0%CVE-2023-6709CRITICALImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflowEPSS 0.9%CVE-2024-37061HIGHRemote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLprojectEPSS 0.9%CVE-2024-1558HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 0.9%CVE-2024-1560HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 0.9%