Patchfirst
Patchfirst

Vendor

mlflow

1 of 11 mlflow CVEs in Patchfirst (9%) are in of vulnerabilities exploited in the wild.

CVEs
11
In CISA KEV
19%
Known ransomware use
0
Median days to KEV
2
from publication
Latest KEV listing
19 Aug 2026
Watch mlflow Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • MLflow In KEV: 1 CVEs: 2
  • mlflow/mlflow In KEV: 0 CVEs: 6
  • mlflow In KEV: 0 CVEs: 3

Top ATT&CK techniques

What attackers do with mlflow CVEs
Open in ATT&CK Navigator

Counts are mlflow CVEs linked to the technique. Each link’s provenance is on the CVE page.

mlflow CVEs

11 CVEs, by priority
  1. CVE-2026-64849MLflow Server-Side Request Forgery Vulnerability
    MLflow · MLflowKEVPublic exploitCritical · 9.3T1190Exploit Public-Facing ApplicationT1090Proxy
    10.0%Top 4.4%
    78.6priority
  2. CVE-2026-2652Authentication Bypass in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitHigh · 8.6
    20.8%Top 2.5%
    77.6priority
  3. CVE-2025-11201MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
    MLflow · MLflowPublic exploitHigh · 8.1
    26.3%Top 2%
    76.0priority
  4. CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitHigh · 7.5
    3.7%Top 10%
    75.1priority
  5. CVE-2024-3848Path Traversal Bypass in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitHigh · 7.5
    43.3%Top 1.3%
    75.0priority
  6. CVE-2023-6909Path Traversal: '\..\filename' in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitHigh · 7.5
    89.7%Top 0.21%
    70.2priority
  7. CVE-2026-115886MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
    mlflow · mlflowPublic exploitMedium · 6.5
    0.7%Top 48%
    66.8priority
  8. CVE-2023-1177Path Traversal: '\..\filename' in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitCritical · 9.3
    69.7%Top 0.63%
    66.4priority
  9. CVE-2026-116690MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
    mlflow · mlflowHigh · 7.5
    0.6%Top 53%
    60.9priority
  10. CVE-2023-3765Absolute Path Traversal in mlflow/mlflow
    mlflow · mlflow/mlflowPublic exploitCritical · 10.0
    67.5%Top 0.69%
    31.9priority
  11. CVE-2026-116692MLflow is an open source AI engineering platform for agents, large language models, and machine learning models
    mlflow · mlflowPublic exploitCritical · 9.8
    0.7%Top 47%
    23.9priority
↑ ↓ chooseEnter openEsc close