MLflow Path Traversal Vulnerability

MLflow CrewAI autologging records LLM provider API keys in logged trace spans

MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed arti…

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints

MLFlow path traversal vulnerability

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint