What is the CVSS score of CVE-2025-52967?

CVE-2025-52967 has a CVSS 3.1 base score of 5.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Mlflow are affected by CVE-2025-52967?

Organizations using MLflow should be aware of moderate risk from CVE-2025-52967, a server-side request forgery vulnerability rated CVSS 5.8. Users could be tricked into performing unintended actions.. A patch is available.

How to fix or mitigate CVE-2025-52967?

Within 30 days: Identify affected systems running MLflow and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Mlflow CVE-2025-52967

EUVD-2025-18888 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2025-06-23 cve@mitre.org

GHSA-wxj7-3fx5-pp9m

SSRF Mlflow AI / ML

5.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-18888

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

CVE Published

Jun 23, 2025 - 15:15 nvd

MEDIUM 5.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 pypi packages depend on mlflow (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 3.0.0rc0.

DescriptionCVE.org

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

Analysis

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.

CVE-2025-52967 vulnerability details – vuln.today

Back

Mlflow CVE-2025-52967

Severity by source

CVSS VectorNVD

Lifecycle Timeline

Blast Radius

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code