mlflow

vulnerable: 0.0.1 ... 2.9.2 (119 versions)

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally…

vulnerable: 0.0.1 ... 3.8.1 (167 versions)

A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due t…

vulnerable: 0.0.1 ... 3.8.0rc0 (166 versions)

A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency…

vulnerable: 0.0.1 ... 3.8.1 (167 versions)

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the exp…

vulnerable: 0.0.1 ... 2.22.5 (145 versions)

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

vulnerable: 0.0.1 ... 3.9.0rc0 (172 versions)

In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the latest version of the repository. If job exe…

vulnerable: 0.0.1 ... 3.9.0rc0 (169 versions)

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` co…

vulnerable: 0.0.1 ... 3.7.0rc0 (164 versions)

MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is no…

vulnerable: 0.0.1 ... 3.9.0rc0 (169 versions)

A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter without validation, and the `_send_webho…

vulnerable: 0.0.1 ... 3.9.0rc0 (171 versions)

A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue a…

vulnerable: 0.0.1 ... 3.7.0rc0 (164 versions)

MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The…

vulnerable: 0.0.1 ... 3.9.0rc0 (175 versions)

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). The FastAPI…

vulnerable: 0.0.1 ... 3.9.0rc0 (173 versions)

MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authenticated attacker can upload a malicious MLmodel file containing a payload that executes when …

vulnerable: 0.0.1 ... 3.9.0rc0 (173 versions)

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoi…