MLflow Experiment-scoped Label Schema CRUD API authorization

Command Injection in mlflow/mlflow

Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject to execute arbitrary code on an end…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary…

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary…

Unrestricted Upload of File with Dangerous Type

Command Injection

Path Traversal in mlflow/mlflow

Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow

Authentication Bypass in mlflow/mlflow

Authorization Bypass in mlflow/mlflow

DNS Rebinding Vulnerability in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

Command Injection in mlflow/mlflow

OS Command Injection in mlflow/mlflow

Environment Variable Resolution Vulnerability in mlflow/mlflow

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Path Traversal in mlflow/mlflow

Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

Path Traversal Bypass in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Local File Read via Path Traversal in mlflow/mlflow

Path Traversal via Parameter Smuggling in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Path Traversal: '\..\filename'

Path Traversal: '\..\filename' in mlflow/mlflow

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API

MLflow Arbitrary File Upload

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path…

Relative Path Traversal in mlflow/mlflow

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1

Server-Side Request Forgery (SSRF) in mlflow/mlflow

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

CSRF in mlflow/mlflow

Privilege Escalation in mlflow/mlflow

Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf