pypi

mlflow

100 Total advisories

100 Vulnerabilities

0 Malware

Dependency scanning

Check whether mlflow is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

mlflow

Vulnerabilities

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow FileStore trace IDs allow path traversal and arbitrary file writes

MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled

MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow AI Gateway permits SSRF through an unvalidated api_base

MLflow AI Gateway permits SSRF through an unvalidated api_base

mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

MLflow has a command injection in mlflow/sagemaker/__init__.py

MLFlow path traversal vulnerability

Arbitrary file write via tar traversal in mlflow

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

MLflow Command Injection vulnerability

MLFlow allows Tracing + Assessments Access

MLflow Use of Default Password Authentication Bypass Vulnerability

mlflow Creates of Temporary File in Directory with Insecure Permissions

MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation

MLFlow unsafe deserialization

MLFlow improper input validation

MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact

MLFlow Creates a Temporary File With Insecure Permissions

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow: trace API endpoints lack proper authorization validators

MLflow: trace API endpoints lack proper authorization validators

CVE-2026-10803

MLflow: Deterministic sampling in dataset digest enables predictable collisions

CVE-2026-2652

CVE-2026-2651

CVE-2026-2393

CVE-2026-4035

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

MLFlow Creates a Temporary File With Insecure Permissions

Arbitrary file write via tar traversal in mlflow

MLflow has a command injection in mlflow/sagemaker/__init__.py

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability

MLFlow allows Tracing + Assessments Access

Remote Code Execution due to Full Controled File Write in mlflow

MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability

MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

MLflow: unauthenticated access to certain FastAPI routes

mlflow Command Injection vulnerability

mlflow Command Injection vulnerability

MLflow Path Traversal Vulnerability

MLflow Path Traversal Vulnerability

mlflow vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Uncontrolled Resource Consumption vulnerability

MLflow Uncontrolled Resource Consumption vulnerability

MLFlow improper input validation

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

mlflow vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

MLflow has a Local File Read/Path Traversal in dbfs

MLflow has a Local File Read/Path Traversal in dbfs

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

MLFlow unsafe deserialization

mlflow vulnerable to Path Traversal

mlflow vulnerable to Path Traversal

MLflow has a command injection in mlflow/sagemaker/init.py

MLflow has a command injection in mlflow/sagemaker/init.py