mlflow/mlflow
- Software type
- AI and machine learning platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/17/2026, mlflow/mlflow recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of mlflow/mlflow and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-8147Authorization Bypass in mlflow/mlflowCVE-2026-4035Environment Variable Resolution Vulnerability in mlflow/mlflowCVE-2026-3198Improper Access Control in mlflow/mlflowCVE-2026-2651Missing Authorization Validation in mlflow/mlflowCVE-2026-2734Authorization Bypass in SearchModelVersions in mlflow/mlflow| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-8147Authorization Bypass in mlflow/mlflow | Exploitation statusActively exploited | FixYes |
| SeverityHigh |
CVE-2026-4035Environment Variable Resolution Vulnerability in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published06/03/2026 | SeverityCritical |
|---|
CVE-2026-3198Improper Access Control in mlflow/mlflow | Exploitation statusActively exploited | FixNo | Published06/02/2026 | SeverityMedium |
|---|
CVE-2026-2651Missing Authorization Validation in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/25/2026 | SeverityCritical |
|---|
CVE-2026-2734Authorization Bypass in SearchModelVersions in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/21/2026 | SeverityMedium |
|---|
CVE-2026-2611Improper Origin Validation in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/19/2026 | SeverityCritical |
|---|
CVE-2026-4137Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/18/2026 | SeverityHigh |
|---|
CVE-2026-2652Authentication Bypass in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/15/2026 | SeverityHigh |
|---|
CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityHigh |
|---|
CVE-2026-2393Server-Side Request Forgery (SSRF) in mlflow/mlflow | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityHigh |
|---|
55 Results | Page 1 of 6