ML
Product
MLflow
On CISA KEVExploited in the wild
78
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 19High 47Medium 10Low 2
Watch
Add MLflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3198 | 6.5 | Jun 2 | Improper Access Control in mlflow/mlflow Affected: 3.9.0 |
| CVE-2026-2734 | 6.5 | May 21 | Authorization Bypass in SearchModelVersions in mlflow/mlflow Affected: before 3.10.0 |
| CVE-2023-6568 | 6.1 | Dec 7 | Reflected XSS via Content-Type Header in mlflow/mlflow Affected: through 2.9.0 |
| CVE-2025-52967 | 5.8 | Jun 23 | gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation Affected: before 3.1.0 |
| CVE-2025-1474 | 5.5 | Mar 20 | Weak Password Requirements in mlflow/mlflow Affected: before 2.19.0 |
| CVE-2026-33865 | 5.4 | Apr 7 | Stored XSS via unsafe YAML parsing in MLflow Affected: through 3.10.1 |
| CVE-2024-3099 | 5.4 | Jun 6 | Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow Affected: 2.11.1 |
| CVE-2024-4263 | 5.4 | May 16 | Improper Access Control in mlflow/mlflow Affected: before 2.12.1 |
| CVE-2024-6838 | 5.3 | Mar 20 | Uncontrolled Resource Consumption in mlflow/mlflow Affected: 2.13.2 |
| CVE-2026-33866 | 4.3 | Apr 7 | Authorization Bypass in MLflow AJAX Endpoint Affected: through 3.10.1 |
Showing 10