MLFlow 任意文件读取漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• MLflow /api/2.0/mlflow/webhooks 服务器端请求伪造漏洞（CVE-2026-64849）
• PoCCVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass
• PoCCVE-2026-2614: MLflow <= 3.9.0 - Arbitrary File Read
• MLflow 存在任意文件读取漏洞（CVE-2026-2614）
• PoCCVE-2026-2652: MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes
• MLflow /ajax-api/3.0/jobs/search 权限绕过漏洞 （CVE-2026-2652）
• PoCCVE-2026-0545: MLflow Job API - Authentication Bypass
• PoCCVE-2023-1177: Mlflow <2.2.1 - Local File Inclusion
• PoCCVE-2023-2356: Mlflow <2.3.0 - Local File Inclusion
• PoCCVE-2023-2780: Mlflow <2.3.1 - Local File Inclusion Bypass
• PoCCVE-2023-3765: MLflow Absolute Path Traversal
• PoCCVE-2023-43472: MLFlow < 2.8.1 - Sensitive Information Disclosure
• PoCCVE-2023-6018: Mlflow - Arbitrary File Write