lfprojects MLflow güvenlik açıkları (CVE)

8.2Yüksek

CVE-2026-53995 16 gün önce

MLflow 3.17.1 and prior Path Traversal via Trace ID API

mlflow mlflow

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the POST /api/3.0/mlflow/t…

9.3Kritik

CVE-2026-64849 KEV 2 ay önce

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

mlflow mlflow

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflo…

10%EPSS

8.1Yüksek

CVE-2026-8147 4 ay önce

Authorization Bypass in mlflow/mlflow

mlflow mlflow/mlflow

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including…

5.0Orta

CVE-2026-13484 4 ay önce

MLflow Experiment-scoped Label Schema CRUD API authorization

MLflow

A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization. It is possible to …

3.6Düşük

CVE-2026-10803 5 ay önce

MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash

MLflow

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the…

9.1Kritik

CVE-2026-4035 5 ay önce

Environment Variable Resolution Vulnerability in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This iss…

6.5Orta

CVE-2026-3198 5 ay önce

Improper Access Control in mlflow/mlflow

mlflow mlflow/mlflow

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `Li…

9.0Kritik

CVE-2026-2651 5 ay önce

Missing Authorization Validation in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/…

6.5Orta

CVE-2026-2734 5 ay önce

Authorization Bypass in SearchModelVersions in mlflow/mlflow

mlflow mlflow/mlflow

In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumera…

9.6Kritik

CVE-2026-2611 5 ay önce

Improper Origin Validation in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant…

7.0Yüksek

CVE-2026-4137 5 ay önce

Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow

mlflow mlflow/mlflow

In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissions (0o777), and the `_create_model_downloading_tmp_dir()` function in `mlflow/pyfu…

8.6Yüksek

CVE-2026-2652 5 ay önce

Authentication Bypass in mlflow/mlflow

mlflow mlflow/mlflow

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). The FastAPI permission middlewa…

21%EPSS

7.5Yüksek

CVE-2026-2614 5 ay önce

Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a `Create…

3.7%EPSS

7.1Yüksek

CVE-2026-2393 5 ay önce

Server-Side Request Forgery (SSRF) in mlflow/mlflow

mlflow mlflow/mlflow

A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter without validation, and the `_send_webhook_request()` functi…

5.3Orta

CVE-2026-33866 7 ay önce

Authorization Bypass in MLflow AJAX Endpoint

Mlflow Mlflow

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model …

5.1Orta

CVE-2026-33865 7 ay önce

Stored XSS via unsafe YAML parsing in MLflow

Mlflow Mlflow

MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authenticated attacker can upload a malicious MLmodel file containing a payload that executes when another user views t…

9.1Kritik

CVE-2026-0545 7 ay önce

Missing Authentication for Critical Function in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled (`…

4.4%EPSS

9.6Kritik

CVE-2026-0596 7 ay önce

Command Injection in mlflow/mlflow

mlflow mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacha…

1.4%EPSS

10.0Kritik

CVE-2025-15379 7 ay önce

Command Injection in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency specifications from…

2.4%EPSS

9.6Kritik

CVE-2025-15036 7 ay önce

Path Traversal Vulnerability in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of valida…

8.1Yüksek

CVE-2025-15381 7 ay önce

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read tra…

8.1Yüksek

CVE-2025-15031 7 ay önce

Path Traversal Vulnerability in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absol…

7.5Yüksek

CVE-2025-14287 7 ay önce

Command Injection in mlflow/mlflow

mlflow mlflow/mlflow; Red Hat Red Hat OpenShift AI (RHOAI)

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shel…

1.5%EPSS

7.0Yüksek

CVE-2025-10279 9 ay önce

Privilege Escalation in mlflow/mlflow

mlflow mlflow/mlflow

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race conditio…

8.1Yüksek

CVE-2025-14279 9 ay önce

DNS Rebinding Vulnerability in mlflow/mlflow

mlflow mlflow/mlflow

MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validation in the MLFlow REST server. This vulnerability allows malicious websites to bypass Same-Origin Policy protections and execute unauthoriz…