LF Projects MLflow

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.

MLflow Experiment-scoped Label Schema CRUD API authorization

Authentication Bypass in mlflow/mlflow

Insecure Temporary File in mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Authorization Bypass in mlflow/mlflow

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

DNS Rebinding Vulnerability in mlflow/mlflow

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal Bypass in mlflow/mlflow

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow

Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

Path Traversal in mlflow/mlflow

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

Path Traversal Vulnerability in mlflow/mlflow

Local File Read via Path Traversal in mlflow/mlflow

Path Traversal via Parameter Smuggling in mlflow/mlflow

Server-Side Request Forgery (SSRF) in mlflow/mlflow

CSRF in mlflow/mlflow

Privilege Escalation in mlflow/mlflow

Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf

Reflected XSS via Content-Type Header in mlflow/mlflow

Authorization Bypass in SearchModelVersions in mlflow/mlflow

Improper Access Control in mlflow/mlflow

Weak Password Requirements in mlflow/mlflow

Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow

Improper Access Control in mlflow/mlflow

Stored XSS via unsafe YAML parsing in MLflow

Uncontrolled Resource Consumption in mlflow/mlflow

Absolute Path Traversal in mlflow/mlflow

Authorization Bypass in MLflow AJAX Endpoint

MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash