{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: mlflow vulnerabilities","home_page_url":"https://patchfirst.co/vendor/mlflow/","feed_url":"https://patchfirst.co/feed/vendor/mlflow.json","description":"New and newly exploited mlflow CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-116690","url":"https://patchfirst.co/cve/CVE-2026-116690/","title":"CVE-2026-116690: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","content_text":"mlflow · mlflow. Not in CISA KEV. EPSS 0.6% (higher than 46.6% of CVEs). CVSS 7.5 HIGH. Priority 60.9 of 100.","summary":"MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-28T17:18:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":60.9,"kev":null,"epss":{"score":0.00559,"percentile":0.46555},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"mlflow","product":"mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-116692","url":"https://patchfirst.co/cve/CVE-2026-116692/","title":"CVE-2026-116692: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","content_text":"mlflow · mlflow. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 23.9 of 100.","summary":"MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-28T15:21:31.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":23.9,"kev":null,"epss":{"score":0.00704,"percentile":0.53293},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"mlflow","product":"mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-115886","url":"https://patchfirst.co/cve/CVE-2026-115886/","title":"CVE-2026-115886: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","content_text":"mlflow · mlflow. Not in CISA KEV. EPSS 0.7% (higher than 52.2% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. Priority 66.8 of 100.","summary":"MLflow is an open source AI engineering platform for agents, large language models, and machine learning models","date_published":"2026-10-23T00:00:00.000Z","date_modified":"2026-10-29T19:17:16.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.8,"kev":null,"epss":{"score":0.00676,"percentile":0.52212},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"mlflow","product":"mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-64849#kev","url":"https://patchfirst.co/cve/CVE-2026-64849/","title":"[KEV] CVE-2026-64849: MLflow Server-Side Request Forgery Vulnerability","content_text":"MLflow · MLflow. In CISA KEV since 2026-08-19. ENISA EUVD lists it as exploited. EPSS 10.0% (higher than 95.6% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 78.6 of 100.","summary":"MLflow Server-Side Request Forgery Vulnerability","date_published":"2026-08-19T00:00:00.000Z","date_modified":"2026-10-26T13:10:00.000Z","tags":["kev","public-exploit","T1190","T1090"],"_patchfirst":{"reason":"kev","priority":78.6,"kev":{"dateAdded":"2026-08-19","ransomware":false},"epss":{"score":0.10017,"percentile":0.95608},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"MLflow","product":"MLflow","techniqueIds":["T1190","T1090"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-2652","url":"https://patchfirst.co/cve/CVE-2026-2652/","title":"CVE-2026-2652: Authentication Bypass in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 20.8% (higher than 97.5% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. Priority 77.6 of 100.","summary":"Authentication Bypass in mlflow/mlflow","date_published":"2026-05-15T00:00:00.000Z","date_modified":"2026-05-15T13:22:21.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":77.6,"kev":null,"epss":{"score":0.20783,"percentile":0.97539},"cvss":{"score":8.6,"severity":"HIGH","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-2614","url":"https://patchfirst.co/cve/CVE-2026-2614/","title":"CVE-2026-2614: Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 75.1 of 100.","summary":"Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow","date_published":"2026-05-11T00:00:00.000Z","date_modified":"2026-08-28T12:04:27.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":75.1,"kev":null,"epss":{"score":0.03691,"percentile":0.89694},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-11201","url":"https://patchfirst.co/cve/CVE-2025-11201/","title":"CVE-2025-11201: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability","content_text":"MLflow · MLflow. Not in CISA KEV. EPSS 26.3% (higher than 98% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. Priority 76.0 of 100.","summary":"MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability","date_published":"2025-10-29T00:00:00.000Z","date_modified":"2026-02-26T16:56:56.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":76,"kev":null,"epss":{"score":0.26282,"percentile":0.98},"cvss":{"score":8.1,"severity":"HIGH","version":"3.0"},"vendor":"MLflow","product":"MLflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-3848","url":"https://patchfirst.co/cve/CVE-2024-3848/","title":"CVE-2024-3848: Path Traversal Bypass in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 43.3% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 75.0 of 100.","summary":"Path Traversal Bypass in mlflow/mlflow","date_published":"2024-05-16T00:00:00.000Z","date_modified":"2024-08-01T20:26:57.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":75,"kev":null,"epss":{"score":0.43284,"percentile":0.98726},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-6909","url":"https://patchfirst.co/cve/CVE-2023-6909/","title":"CVE-2023-6909: Path Traversal: '\\..\\filename' in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 89.7% (higher than 99.79% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 70.2 of 100.","summary":"Path Traversal: '\\..\\filename' in mlflow/mlflow","date_published":"2023-12-18T00:00:00.000Z","date_modified":"2024-08-02T08:42:08.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":70.2,"kev":null,"epss":{"score":0.89716,"percentile":0.99788},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-3765","url":"https://patchfirst.co/cve/CVE-2023-3765/","title":"CVE-2023-3765: Absolute Path Traversal in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 67.5% (higher than 99.31% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 31.9 of 100.","summary":"Absolute Path Traversal in mlflow/mlflow","date_published":"2023-07-19T00:00:00.000Z","date_modified":"2024-10-24T18:25:35.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.9,"kev":null,"epss":{"score":0.6755,"percentile":0.9931},"cvss":{"score":10,"severity":"CRITICAL","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-2356","url":"https://patchfirst.co/cve/CVE-2023-2356/","title":"CVE-2023-2356: Relative Path Traversal in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 4.2% (higher than 90.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 75.2 of 100.","summary":"Relative Path Traversal in mlflow/mlflow","date_published":"2023-04-28T00:00:00.000Z","date_modified":"2025-01-30T20:48:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":75.2,"kev":null,"epss":{"score":0.04153,"percentile":0.90855},"cvss":{"score":10,"severity":"CRITICAL","version":"3.0"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-1177","url":"https://patchfirst.co/cve/CVE-2023-1177/","title":"CVE-2023-1177: Path Traversal: '\\..\\filename' in mlflow/mlflow","content_text":"mlflow · mlflow/mlflow. Not in CISA KEV. EPSS 69.7% (higher than 99.37% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. Priority 66.4 of 100.","summary":"Path Traversal: '\\..\\filename' in mlflow/mlflow","date_published":"2023-03-24T00:00:00.000Z","date_modified":"2025-02-19T20:56:12.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.4,"kev":null,"epss":{"score":0.6968,"percentile":0.99366},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"mlflow","product":"mlflow/mlflow","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}}]}