MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke…
Affects: MLflow
MLflow vulnerabilities
- Product
- MLflow
- Vendor
- LF Projects
- Kind
- MLOps platform
Securaity has published 17 advisories for MLflow: 3 Critical, 10 High, 3 Medium, 1 Low.
MLflow is an MLOps platform: software that teams use to track, store and manage machine learning experiments and models. It is maintained by LF Projects. MLflow is typically installed and run by data science and machine learning teams that train and manage models. If your organization has people who build or train models, they are the ones most likely to have set it up and to look after it.
Advisories
MLflow: MLflow FileStore trace IDs allow path traversal and arbitrary file writes
Affects: MLflow
MLflow: MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor…
Affects: MLflow
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via…
Affects: MLflow
MLflow: MLflow AI Gateway permits SSRF through an unvalidated api_base
Affects: MLflow
MLflow: Trace API endpoints lack proper authorization validators
Affects: MLflow
MLflow: A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7
Affects: MLflow
MLflow: Deterministic sampling in dataset digest enables predictable collisions
Affects: MLflow
MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration
Affects: MLflow
MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions
Affects: MLflow
MLflow: MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts`…
Affects: MLflow
MLflow: MLflow authenticated users can enumerate any registered model versions due to lack of per-model…
Affects: MLflow
MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated…
Affects: MLflow
MLflow: MLFlow Creates a Temporary File With Insecure Permissions
Affects: MLflow
MLflow: Unauthenticated access to certain FastAPI routes
Affects: MLflow
MLflow: MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's…
Affects: MLflow
MLflow: MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability
Affects: MLflow