AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MLflowGHSA-59v3-898r-qwhj

MLflow Server-Side Request Forgery (SSRF)

MLflow

CVE-2023-6974 · Published Dec 20, 2023 · updated Jun 29, 2026

Critical9.8
Fix: upgrade to 2.9.2 or later
GitHub advisory

A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abused to get a remote code execution on the victim machine.

Affected versions

PackageAffectedFixed in
mlflow
PyPI
< 2.9.22.9.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-918
Also known as
BIT-mlflow-2023-6974, CVE-2023-6974, PYSEC-2026-416

More MLflow advisories

All MLflow
High 7.5Dec 20, 2023MLflow Path Traversal VulnerabilityCVE-2023-6909fixed in 2.9.2Critical 9.8Dec 20, 2023MLFlow Path Traversal VulnerabilityCVE-2023-6975fixed in 2.9.2High 7.5Dec 20, 2023MLflow Local File Disclosure VulnerabilityCVE-2023-6977fixed in 2.9.2High 8.8Dec 20, 2023MLflow Path Traversal VulnerabilityCVE-2023-6976fixed in 2.9.2High 8.8Dec 19, 2023mlflow Command Injection vulnerabilityCVE-2023-6940fixed in 2.9.2Critical 10.0Dec 15, 2023Path traversal in MLflowCVE-2023-6831fixed in 2.9.2