Product by MLflow

    Model Context Protocol Servers

    4 known vulnerabilities in Model Context Protocol Servers (MLflow), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Model Context Protocol Servers (MLflow)
    CriticalCVE-2025-68145

    mcp-server-git has missing path validation when using --repository flag

    also in 1 other product

    		9.1
    HighCVE-2025-68143

    Modelcontextprotocol Servers: Path Traversal

    also in 1 other product

    		8.8
    HighCVE-2025-68144

    Modelcontextprotocol Servers: Argument Injection

    also in 1 other product

    		7.1
    MediumCVE-2026-27735

    mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

    also in 1 other product

    		6.5

    All products by MLflow