Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

mlflow/mlflow Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-8147`Authorization Bypass in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published07/02/2026	SeverityHigh
`CVE-2026-4035`Environment Variable Resolution Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published06/03/2026	SeverityCritical
`CVE-2026-3198`Improper Access Control in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published06/02/2026	SeverityMedium
`CVE-2026-2651`Missing Authorization Validation in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/25/2026	SeverityCritical
`CVE-2026-2734`Authorization Bypass in SearchModelVersions in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/21/2026	SeverityMedium
`CVE-2026-2611`Improper Origin Validation in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/19/2026	SeverityCritical
`CVE-2026-4137`Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/18/2026	SeverityHigh
`CVE-2026-2652`Authentication Bypass in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/15/2026	SeverityHigh
`CVE-2026-2614`Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/11/2026	SeverityHigh
`CVE-2026-2393`Server-Side Request Forgery (SSRF) in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/11/2026	SeverityHigh
`CVE-2026-0545`Missing Authentication for Critical Function in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/03/2026	SeverityCritical
`CVE-2026-0596`Command Injection in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published03/31/2026	SeverityCritical
`CVE-2025-15379`Command Injection in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/30/2026	SeverityCritical
`CVE-2025-15036`Path Traversal Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/30/2026	SeverityCritical
`CVE-2025-15381`Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow	Exploitation statusNot known exploited	FixNot confirmed	Published03/27/2026	SeverityHigh
`CVE-2025-15031`Path Traversal Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published03/18/2026	SeverityHigh
`CVE-2025-14287`Command Injection in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published03/15/2026	SeverityHigh
`CVE-2025-10279`Privilege Escalation in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published02/02/2026	SeverityHigh
`CVE-2025-14279`DNS Rebinding Vulnerability in mlflow/mlflow	Exploitation statusNot known exploited	FixYes	Published01/12/2026	SeverityHigh
`CVE-2025-0453`Denial of Service through Batched Queries in GraphQL in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published03/20/2025	SeverityMedium
`CVE-2025-1474`Weak Password Requirements in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/20/2025	SeverityLow
`CVE-2025-1473`CSRF in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/20/2025	SeverityMedium
`CVE-2024-8859`Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/20/2025	SeverityHigh
`CVE-2024-6838`Uncontrolled Resource Consumption in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published03/20/2025	SeverityMedium
`CVE-2024-2928`Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow	Exploitation statusNot known exploited	FixYes	Published06/06/2024	SeverityHigh
`CVE-2024-0520`Remote Code Execution due to Full Controlled File Write in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published06/06/2024	SeverityCritical
`CVE-2024-3099`Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published06/06/2024	SeverityMedium
`CVE-2024-4263`Improper Access Control in mlflow/mlflow	Exploitation statusNot known exploited	FixYes	Published05/16/2024	SeverityMedium
`CVE-2024-3848`Path Traversal Bypass in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/16/2024	SeverityHigh
`CVE-2024-3573`Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published04/16/2024	SeverityCritical
`CVE-2024-1558`Path Traversal Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/16/2024	SeverityHigh
`CVE-2024-1594`Local File Read via Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/16/2024	SeverityHigh
`CVE-2024-1593`Path Traversal via Parameter Smuggling in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/16/2024	SeverityHigh
`CVE-2024-1483`Path Traversal Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/16/2024	SeverityHigh
`CVE-2024-1560`Path Traversal Vulnerability in mlflow/mlflow	Exploitation statusPublic exploit	FixNot confirmed	Published04/16/2024	SeverityHigh
`CVE-2023-6977`Path Traversal: '\..\filename'	Exploitation statusNot confirmed	FixYes	Published12/20/2023	SeverityCritical
`CVE-2023-6976`Unrestricted Upload of File with Dangerous Type	Exploitation statusNot confirmed	FixYes	Published12/20/2023	SeverityHigh
`CVE-2023-6975`Path Traversal: '\..\filename'	Exploitation statusNot confirmed	FixYes	Published12/20/2023	SeverityCritical
`CVE-2023-6974`Server-Side Request Forgery (SSRF)	Exploitation statusNot confirmed	FixYes	Published12/20/2023	SeverityHigh
`CVE-2023-6940`Command Injection	Exploitation statusNot known exploited	FixYes	Published12/19/2023	SeverityCritical
`CVE-2023-6909`Path Traversal: '\..\filename' in mlflow/mlflow	Exploitation statusNot confirmed	FixYes	Published12/18/2023	SeverityHigh
`CVE-2023-6831`Path Traversal: '\..\filename' in mlflow/mlflow	Exploitation statusNot confirmed	FixYes	Published12/15/2023	SeverityHigh
`CVE-2023-6753`Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published12/13/2023	SeverityCritical
`CVE-2023-6709`Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published12/12/2023	SeverityCritical
`CVE-2023-6568`Reflected XSS via Content-Type Header in mlflow/mlflow	Exploitation statusNot confirmed	FixYes	Published12/07/2023	SeverityMedium
`CVE-2023-6014`MLflow Authentication Bypass	Exploitation statusPublic exploit	FixNot confirmed	Published11/16/2023	SeverityCritical
`CVE-2023-6015`MLflow Arbitrary File Upload	Exploitation statusNot confirmed	FixNot confirmed	Published11/16/2023	SeverityCritical
`CVE-2023-6018`MLflow Arbitrary File Write	Exploitation statusNot confirmed	FixNot confirmed	Published11/16/2023	SeverityCritical
`CVE-2023-4033`OS Command Injection in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published08/01/2023	SeverityHigh
`CVE-2023-3765`Absolute Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published07/19/2023	SeverityCritical
`CVE-2023-2780`Path Traversal: '\..\filename' in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published05/17/2023	SeverityCritical
`CVE-2023-2356`Relative Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published04/28/2023	SeverityCritical
`CVE-2023-1177`Path Traversal: '\..\filename' in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/24/2023	SeverityCritical
`CVE-2023-1176`Absolute Path Traversal in mlflow/mlflow	Exploitation statusPublic exploit	FixYes	Published03/24/2023	SeverityMedium
`CVE-2022-0736`Insecure Temporary File in mlflow/mlflow	Exploitation statusNot confirmed	FixYes	Published02/23/2022	SeverityHigh

55 / 55 Results

All vulnerabilities loaded

Security vulnerabilities in mlflow/mlflow

mlflow/mlflow

How many security vulnerabilities does mlflow/mlflow currently have?

Does the latest version of mlflow/mlflow have any known vulnerabilities?

Run an in-depth assessment with complete web risk management