repository icon
mlflow / mlflow Project repository

Open source platform for the machine learning lifecycle

Submit a report

FIRST INTERACTION

WITHIN5 DAYS

REVIEW

WITHIN5 DAYS

FIX

WITHINN/A DAYS

MLflow PyFunc Model Loader - Path Traversal Leading to Arbitrary Code Execution
jayantkamble10000
duplicate
Critical
Command Injection in Container Model Serving via Unsanitized Conda Env Path (Inc...
patchmyday
duplicate
High
Guardrail bypass via client-supplied `X-MLflow-Guardrail-Bypass` header — `gatew...
snakeyworm
not applicable
AI Gateway Guardrail Bypass via X-MLflow-Guardrail-Bypass HTTP Header
penguinmiaou
not applicable
Guardrail bypass via client-supplied `X-MLflow-Guardrail-Bypass` header — `gatew...
snakeyworm
not applicable
Command Injection via Unsanitized Conda Environment File Name
0xhunter213
duplicate
Critical
Incomplete Fix for CVE-2025-15379: Command Injection via python_env.yaml in Virt...
rook2135
duplicate
Critical
Missing object-level authorization on trace endpoints allows cross-experiment...
zx41r
duplicate
High
Command Injection via Unquoted Model Path in `serve_stdin` Execution Path
0xmanan
duplicate
Critical
MLflow SSRF in _fetch_zip_repo — Arbitrary HTTP Requests to Internal Services
radikhoroshev
duplicate
None
MLFLOW_ALLOW_PICKLE_DESERIALIZATION Bypass via DSPy Native Model Format Leads to...
skillwager
duplicate
None
Broken Access Control: Unauthenticated Arbitrary Job Execution via POST /ajax-ap...
microwaveovens-yay
duplicate
Critical
MLflow pyfunc loader_module Arbitrary Code Execution (CWE-470, CVSS 8.8)
nitaydariel
duplicate
High
MLflow Project URI SSRF via _fetch_zip_repo — Arbitrary HTTP Requests to Interna...
radikhoroshev
duplicate
High
Insecure Default in PyFunc CloudPickle Deserialization Leads to Remote Code Exec...
crazymarky
duplicate
High
SSRF via user-controlled ZIP URI in mlflow.projects.run() + ZipSlip arbitrary fi...
elliottower
duplicate
High
Missing Shell Argument Escaping in PyFunc Backend serve_stdin Allows Potential C...
sonumishraa
duplicate
High
Test Title
rook2135
self closed
Command Injection via pip_requirements_override in Virtualenv Execution Path
rook2135
self closed
Incomplete Fix for CVE-2025-15379: Command Injection via python_env.yaml in Virt...
rook2135
self closed
Remote Code Execution via Models-from-Code bypasses pickle guard — arbitrary Pyt...
javitoia
duplicate
Critical
Path Traversal in LocalArtifactRepository.delete_artifacts() Allows Arbitrary Fi...
sonumishraa
self closed
Incomplete Fix of CVE-2025-15379: Command Injection via Conda Env Path
sark4
duplicate
Critical
Command Injection in serve_stdin() via unquoted local_path in bash -c
kimkou2024
duplicate
High
[CWE-77] MLflow — Command Injection via CONDA env_manager Bypass of CVE-2025-153...
doubledoze
duplicate
Critical
Arbitrary code execution via unsanitized loader_module in MLflow model artifacts
n1neman
duplicate
Critical
Broken Access Control: 31 v3 API Endpoints Missing Authorization Validators in M...
lewlademp
duplicate
High
Zero-Click Remote Code Execution (RCE) via Deserialization in mlflow.genai.list_...
samir-atra
duplicate
Critical
Arbitrary Module Import via pickle_module_info.txt in MLflow PyTorch Model Loadi...
hacnho
duplicate
High
Arbitrary File Read via Tar Symlink Bypass of Path Traversal Fix in mlflow/mlflo...
hacnho
duplicate
Medium
Default config allows unauthenticated pickle RCE via model upload API
csaw-admin
duplicate
Critical