MLFlow SSRF via gateway_proxy_handler

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-52967 · ADVISORY
• mlflow/mlflow · WEB
• mlflow/mlflow#15970 · WEB
• mlflow/mlflow · PACKAGE
• mlflow/mlflow release v2.22.2 · WEB
• mlflow/mlflow release v3.1.0 · WEB
• pypa/advisory-database · WEB
• GitHub Advisory GHSA-wxj7-3fx5-pp9m · ADVISORY

mlflow のその他の脆弱性

• CVE-2026-116692緊急 9.8MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0…
• CVE-2026-116691中 6.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, m…
• CVE-2026-116690高 7.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, t…
• CVE-2026-115886中 6.5MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0…
• CVE-2026-53995高 8.2MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to…