Skip to content
MLflowGHSA-hvc6-42vf-jhf8

mlflow Command Injection vulnerability

High8.8CVE-2023-6940 · Published Dec 19, 2023 · updated Jul 7, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
mlflow
PyPI
< 2.9.22.9.2
Details and references

with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-77
Also known as
BIT-mlflow-2023-6940, CVE-2023-6940, PYSEC-2026-1652

More MLflow advisories

All MLflow
DateAdvisory
Dec 202023MLflow Server-Side Request Forgery (SSRF)
CVE-2023-6974Critical9.8fixed in 2.9.2
Dec 202023MLflow Path Traversal Vulnerability
CVE-2023-6909High7.5fixed in 2.9.2
Dec 202023MLFlow Path Traversal Vulnerability
CVE-2023-6975Critical9.8fixed in 2.9.2
Dec 202023MLflow Local File Disclosure Vulnerability
CVE-2023-6977High7.5fixed in 2.9.2
Dec 202023MLflow Path Traversal Vulnerability
CVE-2023-6976High8.8fixed in 2.9.2
Dec 152023Path traversal in MLflow
CVE-2023-6831Critical10.0fixed in 2.9.2

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.