AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MLflowGHSA-wxj7-3fx5-pp9m

MLFlow SSRF via gateway_proxy_handler

MLflow

CVE-2025-52967 · Published Jun 23, 2025 · updated Sep 25, 2025

Medium5.8
Fix: upgrade to 2.22.2 or later (2 fixed versions below)
GitHub advisory

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

Affected versions

PackageAffectedFixed in
mlflow
PyPI
>= 3.0.0rc0, < 3.1.03.1.0
< 2.22.22.22.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-918
Also known as
BIT-mlflow-2025-52967, CVE-2025-52967, PYSEC-2025-52

More MLflow advisories

All MLflow
High 8.1Oct 29, 2025MLflow Weak Password Requirements Authentication Bypass VulnerabilityCVE-2025-11200fixed in 2.22.0rc0Low 3.8Mar 20, 2025MLflow has Weak Password RequirementsCVE-2025-1474fixed in 2.19.0Medium 5.4Mar 20, 2025MLflow Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-1473fixed in 2.20.3Medium 5.9Mar 20, 2025MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2025-0453no fix yetHigh 7.5Mar 20, 2025MLflow has a Local File Read/Path Traversal in dbfsCVE-2024-8859fixed in 2.17.0rc0Medium 5.3Mar 20, 2025MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2024-6838no fix yet