Vendor
MLflow
83 known vulnerabilities in products by MLflow, 1 of them actively exploited (CISA KEV).
Key figures
83
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
27
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-64849 | MLflow Server-Side Request Forgery Vulnerability In CISA KEValso in 3 other products | 9.3 | |
| High | CVE-2026-2652 | Authentication Bypass in mlflow/mlflow | 8.6 | |
| Critical | CVE-2023-6018 | MLflow Arbitrary File Write | 10.0 | |
| Critical | CVE-2023-3765 | Absolute Path Traversal in mlflow/mlflow | 10.0 | |
| Critical | CVE-2025-11201 | MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability | 8.1 | |
| Critical | CVE-2026-0545 | Missing Authentication for Critical Function in mlflow/mlflow | 9.1 | |
| Critical | CVE-2023-1177 | Path Traversal: '\..\filename' in mlflow/mlflow | 9.3 | |
| Critical | CVE-2025-15379 | Command Injection in mlflow/mlflow | 10.0 | |
| Critical | CVE-2023-2780 | Path Traversal: '\..\filename' in mlflow/mlflow | 9.8 | |
| High | CVE-2023-6909 | Path Traversal: '\..\filename' in mlflow/mlflow | 7.5 | |
| Critical | CVE-2023-6015 | MLflow Arbitrary File Upload | 10.0 | |
| High | CVE-2024-3848 | Path Traversal Bypass in mlflow/mlflow | 7.5 | |
| Critical | CVE-2023-6977 | Path Traversal: '\..\filename' | 10.0 | |
| High | CVE-2026-2614 | Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow | 7.5 | |
| High | CVE-2024-2928 | Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow | 7.5 | |
| Critical | CVE-2023-2356 | Relative Path Traversal in mlflow/mlflow | 10.0 | |
| Critical | CVE-2024-0520 | Remote Code Execution due to Full Controlled File Write in mlflow/mlflow | 10.0 | |
| High | CVE-2025-0453 | Denial of Service through Batched Queries in GraphQL in mlflow/mlflow | 5.9 | |
| High | CVE-2023-6831 | Path Traversal: '\..\filename' in mlflow/mlflow | 8.1 | |
| Critical | CVE-2023-6975 | Path Traversal: '\..\filename' | 9.8 | |
| High | CVE-2024-8859 | Path Traversal in mlflow/mlflow | 7.5 | |
| High | CVE-2026-2033 | MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability | 8.1 | |
| Critical | CVE-2026-0596 | Command Injection in mlflow/mlflow | 9.6 | |
| High | CVE-2024-1483 | Path Traversal Vulnerability in mlflow/mlflow | 7.5 | |
| Critical | CVE-2026-2635 | MLflow Use of Default Password Authentication Bypass Vulnerability | 9.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
Products
| Mlflow/mlflow | 55 | 0 |
| MLflow | 28 | 1 |