repository icon
mlflow / mlflow Project repository

Open source platform for the machine learning lifecycle

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN40 DAYS

FIX

WITHIN66 DAYS

MLflow Basic Authentication Bypass via Base64 Brute-Force
freyxfi
informative
Critical
OS Command injection in archive_directory function
ehtec
not applicable
Clickjacking in MLflow
freyxfi
duplicate
Medium
Arbitrary File Write to Remote Code Execution using the R2/optimized S3 artifact...
trixterthetux
duplicate
Critical
Leveraging FTP Server for fully controlled file writing causing RCE
soloplayer140
duplicate
Critical
Local File Read (LFI) via Overwrite Yaml file
taiphung217
pending
SSRF (Server Side Request Forgery) for Fully Controlled Files Leading to RCE
soloplayer140
pending
Server-Side Request Forgery (SSRF) due to bad 302 redirect handling in 2.19.0 Ve...
soloplayer140
duplicate
High
DoS Vulnerability in MLflow Leading to UI Inaccessibility
soloplayer140
duplicate
High
DoS Vulnerability in MLflow Leading to UI Inaccessibility
soloplayer140
self closed
Using Pickle Format in MLflow: Security Risks and Potential for Malicious Code E...
soloplayer140
duplicate
Critical
Security Vulnerability in MLflow Run Arbitrary Code
krishnast545
spam
Malicious meta.yaml file allows arbitrary read/write/list files on the filesyste...
ozelis
duplicate
High
Admin Able to Create User Without Setting a Password
krishnast545
Low
•$20•CVE-2025-1474
The MD5 collision caused the same data set path, and the new data set could not...
kexinoh
pending
Denial of service through batched queries in GraphQL
patrik-ha
Medium
•$125•CVE-2025-0453
Remote Code Execution and Local File Read via Overwrite File
taiphung217
informative
Critical
Xss On MLFLOW
samr301
informative
Medium
Local File Inclusion on Mlflow
samr301
not applicable
CSRF ON SIGNUP PAGE
krishnast545
Medium
•$125•CVE-2025-1473
Stored XSS in Artifacts
jamoski3112
pending
Local File Read/Path Traversal in dbfs
m4yfly
High
•$750•CVE-2024-8859
RCE in Github Actions
redyetidev
informative
Critical
DOS in mlflow model tab, due to multiple EICAR file creation
mnqazi
not applicable
Creating/Renaming Experiment with Large Number of Integers in Name Leads to DOS...
mnqazi
Medium
•$125•CVE-2024-6838
Frameable response (potential Clickjacking)
dan-xzero
informative
None
Model Creation using URL encoding result in tDenial of Service Or Data Model Poi...
dan-xzero
Medium
•$125•CVE-2024-3099
Unauthenticated DOS Attack due to Race Condition
rook1337
not applicable
Local File Read/Path Traversal bypass
asimovl
High
•$750•CVE-2024-3848
Low privilege users can delete artifacts with EDIT permission
rook1337
Medium
•$125•CVE-2024-4263
Bypass Local File Read (LFI) due to URI parsing confusion
trongphuc12
duplicate
Critical
Blind SSRF
achchhelalchauhan
not applicable
SQL injection
achchhelalchauhan
not applicable
Reflected POST XSS in mlflow/mlflow
achchhelalchauhan
not applicable
SQL injection attack on experiment update
achchhelalchauhan
not applicable
Race Condition Vulnerability in MLflow Experiments Creation
jplopezy
informative
Medium
Local File inclusion through mlflow Cli
rook1337
informative
High
Local File Read (LFI) by URI fragment parsing confusion
zpbrent
High
•$750•CVE-2024-2928
HTML / XSS Injection to Redirection
0xamal
informative
High
Code Execution Via Deserialization of untrusted data
w3bspl01t3r
not applicable
Path traversal when deleting artifacts
ozelis
High
•$750•CVE-2024-1560
Local file read using path traversal in experinent's artifact_location
ozelis
High
•$750•CVE-2024-1594
Local file read using path traversal in model version source
ozelis
High
•$750•CVE-2024-1558
Code Execution due to pickle.load
aaron911
informative
Medium
Path traversal by smuggling in path traversal sequences using ;
haxatron
High
•$750•CVE-2024-1593
Path Traversal using local URI with # instead of ?
haxatron
High
•$750•CVE-2024-1483
Bypass of jinja2 SSTI
am0o0
Critical
•$1500•CVE-2023-6940
HTML Injection in mlflow/mlflow
ngostuan
informative
Medium
Arbitrary File Write when loading datasets on Windows
haxatron
Critical
•$1500•CVE-2023-6753
Remote Code Execution due to Full Controled File Write
kevin-mizu
Critical
•$4500•CVE-2024-0520
bypass validate_path_is_safe() check to upload arbitrary files to arbitrary dire...
ozelis
High
•$750•CVE-2023-6976
s3 bucket takeover
ranjit-git
informative
High
Local File Disclosure bypass
malikdacoda
Critical
•$1500•CVE-2023-6977
OS Command injection in `serve` CLI action
malikdacoda
not applicable
Reflected POST XSS
m0kr4n3
Medium
•$125•CVE-2023-6568
Server-Side Request Forgery (SSRF) due to bad 302 redirect handling
kevin-mizu
High
•$750•CVE-2023-6974
Path traversal in artifacts deletion
kevin-mizu
High
•$1800•CVE-2023-6831
Remote Code Execution due to Full Controled File Write
kevin-mizu
Critical
•$4500•CVE-2023-6975
Local File Read (LFI) due to scheme confusion
kevin-mizu
Critical
•$1800•CVE-2024-3573
Local File Read (LFI) due to URI parsing confusion
kevin-mizu
High
•$1500•CVE-2023-6909
Remote Code Execution due to jinja2 SSTI
kevin-mizu
Critical
•$4500•CVE-2023-6709
Malicious model to ACE by pyfunc and many other occurences
zpbrent
informative
High
Cross Site Request Forgery in creating experiments/models
sreeappsec
informative
Medium
Processing of softlink files leads to logging and Expose Internal Confidential F...
b3ef
informative
Medium
Remote Code Execution due to Full Controled File Write
kevin-mizu
Critical
•$30485•CVE-2023-6018
Path Traversal using C:.. allows to break out of root directory on Windows
haxatron
Critical
•$30485•CVE-2023-6015
Stored xss bug to control other account
ranjit-git
informative
High
Authentication Bypass via REST API endpoint
sierrahaex
Critical
•$4500•CVE-2023-6014
Vulnerable to clickjacking
liteshghute
not applicable
Multiple command injections in `mlflow models` CLI action
adeadfed
High
•CVE-2023-4033
Multiple path traversals on Windows hosts
adeadfed
Critical
•CVE-2023-3765
LFI in Model Version REST API creation
benwilson2
Critical
•CVE-2023-2356
Local File Read Bypass in mlflow/mlflow
iamnoooob
Critical
•CVE-2023-2780
Blind LFI in register-model/get?name=
danmcinerney
Medium
•CVE-2023-1176
LFI/RFI in MLflow
danmcinerney
Critical
•CVE-2023-1177
Omitted
skifast1
self closed
Insecure Temporary File
srikanthprathi
High
•$17.5•CVE-2022-0736