MLflow EUVD-2026-41257

MLflow's FastAPI job endpoints bypass basic-auth entirely, allowing network attackers to submit and execute jobs without

Path traversal in MLflow's tar.gz extraction (mlflow/mlflow versions <3.7.0) allows remote attackers to overwrite arbitr

Critical command injection in MLflow 3.8.0 enables remote code execution during model deployment when attackers supply m

Cross-origin request forgery in MLflow 3.9.0's Assistant feature allows remote attackers to bypass loopback-only protect

MLflow, a popular open-source machine learning lifecycle platform, contains a path traversal vulnerability in its pyfunc

Cross-user artifact overwrite in MLflow versions prior to 3.10.0 allows authenticated users with --serve-artifacts mode

Command injection vulnerability in MLflow versions before v3.7.0 that allows attackers to execute arbitrary commands by

Command injection in MLflow's MLServer integration allows unauthenticated adjacent network attackers to execute arbitrar

Server-side environment variable disclosure in MLflow versions prior to 3.11.0 allows attackers to exfiltrate sensitive

Remote unauthenticated attackers can read arbitrary files from MLflow server filesystems in versions 3.9.0 and earlier.

Server-Side Request Forgery in MLflow allows authenticated users to force the MLflow backend to send HTTP requests to ar

MLflow's basic-auth authentication system fails to protect tracing and assessment endpoints, enabling any authenticated