MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Command Injection in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Absolute Path Traversal in mlflow/mlflow

Missing Authentication for Critical Function in mlflow/mlflow

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

Path Traversal: '\..\filename'

Server-Side Request Forgery (SSRF)

MLflow Authentication Bypass

MLflow Arbitrary File Write

Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1

Improper Origin Validation in mlflow/mlflow

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.

Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Missing Authorization Validation in mlflow/mlflow

MLflow Experiment-scoped Label Schema CRUD API authorization

Command Injection in mlflow/mlflow

Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject to execute arbitrary code on an end…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary…

Unrestricted Upload of File with Dangerous Type

Command Injection

Path Traversal in mlflow/mlflow

Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow

Authentication Bypass in mlflow/mlflow

Authorization Bypass in mlflow/mlflow

DNS Rebinding Vulnerability in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

Command Injection in mlflow/mlflow

OS Command Injection in mlflow/mlflow

Environment Variable Resolution Vulnerability in mlflow/mlflow

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Path Traversal in mlflow/mlflow

Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

Path Traversal Bypass in mlflow/mlflow