Information exposure in MLflow

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-43472 · ADVISORY
• mlflow/mlflow · PACKAGE
• mlflow.org/news/2023/12/06/2.9.0-release/index.html · WEB
• contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-security · WEB
• pypi.org/project/mlflow · PACKAGE
• GitHub Advisory GHSA-wqxf-447m-6f5f · ADVISORY

Autres vulnérabilités de mlflow

• CVE-2026-116692CRITIQUE 9.8MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0…
• CVE-2026-116691MOYENNE 6.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, m…
• CVE-2026-116690ÉLEVÉE 7.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, t…
• CVE-2026-115886MOYENNE 6.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0…
• CVE-2026-53995ÉLEVÉE 8.2MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to…