Latest vulnerabilities for "mlflow mlflow"

Where

Sort:

MLflow MLflowAuthorization Bypass in mlflow/mlflow

Risk 60

Severity

8.1

First published (updated )

CVE-2026-8147

MLflow MLflowA vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment v…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2484318

MLflow MLflowA vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU…

Risk 76

First published (updated )

REDHAT-BUG-2481117

MLflow MLflowIn MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /…

Risk 80

First published (updated )

REDHAT-BUG-2479797

MLflow MLflowA vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/ml…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2469309

MLflow MLflowIn mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authen…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2454889

MLflow MLflowCommand Injection

Risk 33

Severity

First published (updated )

REDHAT-BUG-2452949

MLflow MLflowPath Traversal

Risk 33

Severity

First published (updated )

REDHAT-BUG-2452925

MLflow MLflowA vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improp…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2448912

MLflow MLflowCommand Injection

Risk 33

Severity

First published (updated )

REDHAT-BUG-2447690

MLflow MLflowMLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2441514

MLflow MLflowMLflow Weak Password Requirements Authentication Bypass Vulnerability

Risk 86

Severity

9.8

First published (updated )

CVE-2025-11200

Databricks MLflowMLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Risk 86

Severity

9.8

First published (updated )

CVE-2025-11201

MLflow MLflowMLflow Weak Password Requirements Authentication Bypass Vulnerability

Risk 38

Severity

8.1

First published (updated )

Advisory

ZDI-25-932

MLflow MLflowZDI-25-932: MLflow Weak Password Requirements Authentication Bypass Vulnerability

Risk 38

Severity

8.1

First published (updated )

ZDI-CAN-26916

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

MLflow MLflowAuthorization Bypass in mlflow/mlflow

MLflow MLflowA vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment v…

MLflow MLflowA vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU…

MLflow MLflowIn MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /…

MLflow MLflowA vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/ml…

Don't miss critical vulnerabilities

MLflow MLflowIn mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authen…

MLflow MLflowCommand Injection

MLflow MLflowPath Traversal

MLflow MLflowA vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improp…

MLflow MLflowCommand Injection

Don't miss critical vulnerabilities

MLflow MLflowMLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote…

MLflow MLflowMLflow Weak Password Requirements Authentication Bypass Vulnerability

Databricks MLflowMLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow MLflowMLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow MLflowZDI-25-932: MLflow Weak Password Requirements Authentication Bypass Vulnerability

Don't miss critical vulnerabilities

Company

Resources

Contact