Lfprojects Mlflow vulnerabilities
77 published vulnerabilities in Lfprojects Mlflow, 1 of them exploited in the wild. The most were published in 2024 (26), and 17 so far in 2026.
Lfprojects Mlflow vulnerabilities by year
2022
2023
2024
2025
2026
Most exploited Lfprojects Mlflow vulnerabilities
- CVE-2026-64849 MLflow Server-Side Request Forgery
- CVE-2025-15379 Command Injection in mlflow/mlflow
- CVE-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow
- CVE-2023-6977 Path Traversal: '\..\filename'
- CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow
- CVE-2023-6015 MLflow Arbitrary File Upload
- CVE-2023-6018 MLflow Arbitrary File Write
- CVE-2023-3765 Absolute Path Traversal in mlflow/mlflow
- CVE-2023-2356 Relative Path Traversal in mlflow/mlflow
- CVE-2023-6975 Path Traversal: '\..\filename'
- CVE-2023-2780 Path Traversal: '\..\filename' in mlflow/mlflow
- CVE-2026-2611 Improper Origin Validation in mlflow/mlflow
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.