Command Injection in mlflow/mlflow

Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

Authentication Bypass in mlflow/mlflow

Authorization Bypass in mlflow/mlflow

DNS Rebinding Vulnerability in mlflow/mlflow

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

Command Injection in mlflow/mlflow

Environment Variable Resolution Vulnerability in mlflow/mlflow

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Path Traversal in mlflow/mlflow

Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

Server-Side Request Forgery (SSRF) in mlflow/mlflow

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

CSRF in mlflow/mlflow

Privilege Escalation in mlflow/mlflow