ML
Product
mlflow/mlflow
35
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 6Low 0
Watch
Add mlflow/mlflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15379 | 10.0 | Mar 30 | Command Injection in mlflow/mlflow Affected: before 3.8.2 |
| CVE-2025-15036 | 10.0 | Mar 30 | Path Traversal Vulnerability in mlflow/mlflow Affected: before 3.9.0 |
| CVE-2026-0545 | 9.8 | Apr 3 | Missing Authentication for Critical Function in mlflow/mlflow Affected: through latest |
| CVE-2026-2611 | 9.6 | May 19 | Improper Origin Validation in mlflow/mlflow Affected: before 3.10.0 |
| CVE-2024-3573 | 9.3 | Apr 16 | Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow Affected: before 2.10.0 |
| CVE-2025-15031 | 9.1 | Mar 18 | Path Traversal Vulnerability in mlflow/mlflow Affected: through latest |
| CVE-2026-2651 | 9.0 | May 25 | Missing Authorization Validation in mlflow/mlflow Affected: before 3.10.0 |
Showing 7