Mlflow EUVD-2025-18888

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. Rated high severity (CVSS 7.5), this vulnerabilit

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. Rated critical severity (CVSS 10.0), this vul

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it cou

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment. Rated critical s

An attacker can overwrite any file on the server hosting MLflow without any authentication. Rated critical severity (CVS

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1. Rated critical severity (CVSS 9.8), th

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. Rated critical severity (CVSS 9.8), th

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. Rated critical se

Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. Rated critical severity (CVSS 9.6), t

mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of specia