CVE Tools
Track your stack

Mlflow

99 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Mlflow, a product in the ai ml space. Use it to gauge the current risk picture and drill into individual advisories.

Mlflow CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Mlflow CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-035
2025-040
2025-050
2025-061
2025-070
2025-080
2025-090
2025-102
2025-110
2025-120
2026-011
2026-023
2026-036
2026-043
2026-057
2026-064
2026-071
2026-084
2026-094
2026-105
2026-116

Severity

How the 99 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1819%
  • High5961%
  • Medium1718%
  • Low22%

Latest CVEs

The 15 most recently published vulnerabilities affecting Mlflow.

  1. CVE-2026-118628MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability8.2
  2. CVE-2026-118627MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8
  3. CVE-2026-118626MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability5.4
  4. CVE-2026-118625MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability6.3
  5. CVE-2026-118624MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability5.4
  6. CVE-2026-118623MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8
  7. CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules9.8
  8. CVE-2026-116691MLflow CrewAI autologging records LLM provider API keys in logged trace spans6.5
  9. CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source7.5
  10. CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints6.5
  11. CVE-2026-53995MLflow 3.17.1 and prior Path Traversal via Trace ID API8.2
  12. CVE-2026-96804CVE-2026-968048.8
  13. CVE-2026-96775MLflow dspy bypasses pickle deserialization control8.8
  14. CVE-2026-79721Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when load...—
  15. GHSA-gqvg-gmmx-x4hmMLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact—

Product grouping is registry-driven, with AI assist and human review. How it works