MLflow Vulnerabilities
44 vulnerabilities related to MLflow
- 2026-08-19MLflow /api/2.0/mlflow/webhooks 服务器端请求伪造漏洞（CVE-2026-64849）
- PoC2026-08-19CVE-2026-64849: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass
- PoC2026-08-16CVE-2026-2614: MLflow <= 3.9.0 - Arbitrary File Read
- PoC2026-06-17CVE-2026-2652: MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes
- 2026-06-12MLflow /ajax-api/3.0/jobs/search 权限绕过漏洞 （CVE-2026-2652）
- PoC2026-05-09CVE-2026-0545: MLflow Job API - Authentication Bypass
- PoC2025-08-01CVE-2023-1177: Mlflow <2.2.1 - Local File Inclusion
- PoC2025-08-01CVE-2023-2356: Mlflow <2.3.0 - Local File Inclusion
- PoC2025-08-01CVE-2023-2780: Mlflow <2.3.1 - Local File Inclusion Bypass
- PoC2025-08-01CVE-2023-3765: MLflow Absolute Path Traversal
- PoC2025-08-01CVE-2023-43472: MLFlow < 2.8.1 - Sensitive Information Disclosure
- PoC2025-08-01CVE-2023-6018: Mlflow - Arbitrary File Write
- PoC2025-08-01CVE-2023-6568: Mlflow - Cross-Site Scripting
- PoC2025-08-01CVE-2023-6831: mlflow - Path Traversal
- PoC2025-08-01CVE-2023-6909: Mlflow <2.9.2 - Path Traversal
- PoC2025-08-01CVE-2023-6977: Mlflow <2.8.0 - Local File Inclusion
- PoC2025-08-01CVE-2024-1483: Mlflow < 2.9.2 - Path Traversal
- PoC2025-08-01CVE-2024-2928: MLflow < 2.11.3 - Path Traversal
- PoC2025-08-01CVE-2024-3848: Mlflow < 2.11.0 - Path Traversal
- PoC2025-08-01CVE-2024-8859: Mlflow < 2.17.0 - Local File Inclusion
- PoC2025-08-01CVE-2023-1177: MLflow get-artifact 任意文件读取漏洞
- PoC2025-08-01mlflow-unauth: Mlflow - Unauthenticated Access
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2024-3848）
- 2025-05-30MLflow get-artifact 目录遍历漏洞（CVE-2024-2928）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2024-1483）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2023-6909）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/model-versions/create 目录遍历漏洞（CVE-2023-6977）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2024-3848）
- 2025-05-30MLflow get-artifact 目录遍历漏洞（CVE-2024-2928）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2024-1483）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/experiments/create 目录遍历漏洞 （CVE-2023-6909）
- 2025-05-30MLflow get-artifact /ajax-api/2.0/mlflow/model-versions/create 目录遍历漏洞（CVE-2023-6977）
- 2025-05-23MLflow目录遍历漏洞(CVE-2023-2356)
- 2024-12-04MLflow 未授权访问漏洞
- 2024-07-18Mlflow CVE-2023-6909 目录遍历漏洞
- 2024-05-23mlflow CVE-2023-6831 目录遍历漏洞
- 2024-03-21MLflow CVE-2023-1176 目录遍历漏洞
- 2024-02-07MLFlow 任意文件读取漏洞
- 2024-02-07MLflow CVE-2023-3765 目录遍历漏洞
- 2023-11-20MLflow 身份验证绕过 (CVE-2023-6014)
- 2023-11-17(CVE-2023-3765) MLflow 绝对路径遍历漏洞
- 2023-07-21MLflow存在目录遍历漏洞(CVE-2023-3765)
- 2023-06-21mlflow目录遍历漏洞(CVE-2023-2780)
- 2023-05-23MLflow get-artifact 任意文件读取漏洞 (CVE-2023-1177)