CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 05:50 UTC)

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product lfprojects:mlflow. Show all products

26 CVEs, showing 1 to 26

CVE	Severity	Title	Published
CVE-2026-64849 Known exploited	Critical 9.3	MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) Assigned by GitHub_M	Aug 17, 2026
CVE-2026-8147	High 8.1	In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators.	Jul 2, 2026
CVE-2026-13484	High 8.8	A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7.	Jun 28, 2026
CVE-2026-10803	Low 3.6	A flaw has been found in MLflow up to 3.10.0.	Jun 4, 2026
CVE-2026-4035	High 7.7	A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm…	Jun 3, 2026
CVE-2026-3198	Medium 6.5	MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints.	Jun 2, 2026
CVE-2026-2651	Critical 9.0	A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled.	May 25, 2026
CVE-2026-2734	Medium 6.5	In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when basic authenticati…	May 21, 2026
CVE-2026-2611	Critical 9.6	In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.	May 19, 2026
CVE-2026-4137	High 7.8	In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissions (0o777), and the `_…	May 18, 2026
CVE-2026-2652	High 8.6	A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) an…	May 15, 2026
CVE-2026-2614	High 7.5	A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files f…	May 11, 2026
CVE-2026-2393	High 7.1	A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.	May 11, 2026
CVE-2026-33866	Medium 4.3	MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.	Apr 7, 2026
CVE-2026-33865	Medium 5.4	MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.	Apr 7, 2026
CVE-2026-0545	Critical 9.8	In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled.	Apr 3, 2026
CVE-2026-0596	High 7.8	A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`.	Mar 31, 2026
CVE-2025-15379	Critical 10.0	A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function.	Mar 30, 2026
CVE-2025-15036	Critical 10.0	A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository.	Mar 30, 2026
CVE-2025-15381	High 7.1	In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators.	Mar 27, 2026
CVE-2025-15031	Critical 9.1	A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries.	Mar 18, 2026
CVE-2025-14287	High 8.8	A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167.	Mar 16, 2026
CVE-2025-10279	High 7.0	In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777).	Feb 2, 2026
CVE-2025-14279	High 8.1	MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validation in the MLFlow REST server.	Jan 12, 2026
CVE-2025-11201	Critical 9.8	MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability.	Oct 29, 2025
CVE-2025-11200	Critical 9.8	MLflow Weak Password Requirements Authentication Bypass Vulnerability.	Oct 29, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.