mlflow vulnerabilities and fixes
Exploited and high-severity mlflow vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.8CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesRCEVerify fixmlflow mlflow
1 min read - 9.3CVE-2026-64849MLflow Server-Side Request Forgery VulnerabilityExploitedVerify fixMLflow MLflow
1 min read