Mlflow

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirec…

Aug 17, 2026

Authorization Bypass in mlflow/mlflow

Jul 2, 2026

MLflow Experiment-scoped Label Schema CRUD API authorization

Jun 28, 2026

MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash

Jun 4, 2026

Environment Variable Resolution Vulnerability in mlflow/mlflow

Jun 3, 2026

Improper Access Control in mlflow/mlflow

Jun 2, 2026

Missing Authorization Validation in mlflow/mlflow

May 25, 2026

Authorization Bypass in SearchModelVersions in mlflow/mlflow

May 21, 2026

Improper Origin Validation in mlflow/mlflow

May 19, 2026

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

May 18, 2026

Authentication Bypass in mlflow/mlflow

May 15, 2026

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

May 11, 2026

Server-Side Request Forgery (SSRF) in mlflow/mlflow

May 11, 2026

Authorization Bypass in MLflow AJAX Endpoint

Apr 7, 2026

Stored XSS via unsafe YAML parsing in MLflow

Apr 7, 2026

Missing Authentication for Critical Function in mlflow/mlflow

Apr 3, 2026

Command Injection in mlflow/mlflow

Mar 31, 2026

Command Injection in mlflow/mlflow

Mar 30, 2026

Path Traversal Vulnerability in mlflow/mlflow

Mar 30, 2026

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

Mar 27, 2026

Path Traversal Vulnerability in mlflow/mlflow

Mar 18, 2026

Command Injection in mlflow/mlflow

Mar 15, 2026

Privilege Escalation in mlflow/mlflow

Feb 2, 2026

DNS Rebinding Vulnerability in mlflow/mlflow

Jan 12, 2026

MLflow Weak Password Requirements Authentication Bypass Vulnerability

Oct 29, 2025