M
Vendor security profile1 actively exploited CVEs
mlflow
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs23
Critical8
CISA KEV1
Public exploit20
Patch rate%52
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
6
1
5
4
1
4
2
0
CVE KEV
CVE severity distribution
23toplam CVE
Critical8 (35%)
High11 (48%)
Medium3 (13%)
Low1 (4%)
Patch and exploitation view
%52
Verified patch
%4
CISA KEV
%87
Public exploit
12Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
8.8
CVE-2026-96804
CVE-2026-96804
M
Patch status unknownEPSS %0
8.8
CVE-2026-96775
MLflow dspy bypasses pickle deserialization control
M
Patch status unknownEPSS %0
6.5
CVE-2026-69146
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
M
Patch verifiedEPSS %0
7.1
CVE-2026-69148
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
M
Patch verifiedEPSS %0
9.3
CVE-2026-64849 Actively exploited
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
M
Patch verifiedEPSS %10
7.1
CVE-2026-71211
mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
M
Patch status unknownEPSS %0
9.1
CVE-2026-4035
Environment Variable Resolution Vulnerability in mlflow/mlflow
M
Patch verifiedEPSS %1
7.5
CVE-2026-2614
Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow
M
Patch verifiedEPSS %3
9.1
CVE-2026-0545
Missing Authentication for Critical Function in mlflow/mlflow
M
Patch status unknownEPSS %4