Advisoriesby IbisDatabricks security advisories
87 advisories across MLflow, Databricks
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceMLflowCVE-2026-116690fixed in 3.17.0MLflow CrewAI autologging records LLM provider API keys in logged trace spansMLflowCVE-2026-116691fixed in 3.17.0MLflow: unsafe deserializationMLflowCVE-2026-116692fixed in 3.17.0MLflow: server-side request forgeryMLflowCVE-2026-115886fixed in 3.17.0MLflow FileStore trace IDs allow path traversal and arbitrary file writesMLflowCVE-2026-53995fixed in 3.17.2MLflow: unsafe deserializationMLflowGHSA-gqvg-gmmx-x4hmfixed in 3.15.0MLflow: server-side request forgeryMLflowCVE-2026-64849fixed in 3.15.0MLflow AI Gateway permits SSRF through an unvalidated api_baseMLflowCVE-2026-71211no fix yetMLflow: trace API endpoints lack proper authorization validatorsMLflowCVE-2026-8147fixed in 3.13.0rc0MLflow: Deterministic sampling in dataset digest enables predictable collisionsMLflowCVE-2026-10803fixed in 3.10.1MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltrationMLflowCVE-2026-4035fixed in 3.11.0MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitionsMLflowCVE-2026-3198fixed in 3.11.0rc0MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabledMLflowCVE-2026-2651fixed in 3.10.0MLflow: information disclosureMLflowCVE-2026-2734fixed in 3.10.0MLflow: origin validation errorMLflowCVE-2026-2611fixed in 3.10.0MLFlow Creates a Temporary File With Insecure PermissionsMLflowCVE-2026-4137fixed in 3.11.0MLflow: unauthenticated access to certain FastAPI routesMLflowCVE-2026-2652fixed in 3.11.0MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystemMLflowCVE-2026-2614fixed in 3.10.0MLflow Has a Server-Side Request Forgery (SSRF) VulnerabilityMLflowCVE-2026-2393fixed in 3.9.0MLflow is vulnerable to an authorization bypass affecting the AJAX endpointMLflowCVE-2026-33866fixed in 3.11.0rc0MLflow: cross-site scriptingMLflowCVE-2026-33865fixed in 3.11.1MLflow: remote code executionMLflowCVE-2026-0545no fix yetMlflow: Command Injection when serving models with enable_mlserver=TrueMLflowCVE-2026-0596fixed in 3.9.0MLflow Command Injection vulnerabilityMLflowCVE-2025-15379fixed in 3.8.1MLFlow path traversal vulnerabilityMLflowCVE-2025-15036fixed in 3.9.0rc0MLFlow allows Tracing + Assessments AccessMLflowCVE-2025-15381no fix yetArbitrary file write via tar traversal in mlflowMLflowCVE-2025-15031fixed in 3.9.0rc0MLflow has a command injection in mlflow/sagemaker/__init__.pyMLflowCVE-2025-14287fixed in 3.8.0rc0MLflow Use of Default Password Authentication Bypass VulnerabilityMLflowCVE-2026-2635fixed in 3.8.0rc0MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution VulnerabilityMLflowCVE-2026-2033fixed in 3.8.0rc0mlflow Creates of Temporary File in Directory with Insecure PermissionsMLflowCVE-2025-10279fixed in 3.4.0rc0MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validationMLflowCVE-2025-14279fixed in 3.5.0MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution VulnerabilityMLflowCVE-2025-11201fixed in 2.22.4 +1MLflow Weak Password Requirements Authentication Bypass VulnerabilityMLflowCVE-2025-11200fixed in 2.22.0rc0MLFlow SSRF via gateway_proxy_handlerMLflowCVE-2025-52967fixed in 2.22.2 +1MLflow has Weak Password RequirementsMLflowCVE-2025-1474fixed in 2.19.0MLflow Cross-Site Request Forgery (CSRF) vulnerabilityMLflowCVE-2025-1473fixed in 2.20.3MLflow Uncontrolled Resource Consumption vulnerabilityMLflowCVE-2025-0453no fix yetMLflow has a Local File Read/Path Traversal in dbfsMLflowCVE-2024-8859fixed in 2.17.0rc0MLflow Uncontrolled Resource Consumption vulnerabilityMLflowCVE-2024-6838no fix yetMLflow's excessive directory permissions allow local privilege escalationMLflowCVE-2024-27134fixed in 2.16.0Undefined Behavior in mlflowMLflowCVE-2024-3099fixed in 2.11.3Local File Inclusion in mlflowMLflowCVE-2024-2928fixed in 2.11.3Remote code execution in mlflowMLflowCVE-2024-0520fixed in 2.9.0MLFlow unsafe deserializationMLflowCVE-2024-37060no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37058no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37057no fix yetMLFlow improper input validationMLflowCVE-2024-37061no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37059no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37053no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37052no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37056no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37054no fix yetMLFlow unsafe deserializationMLflowCVE-2024-37055no fix yetMLflow allows low privilege users to delete any artifactMLflowCVE-2024-4263fixed in 2.10.1MLflow has a Local File Read/Path Traversal bypassMLflowCVE-2024-3848fixed in 2.12.1mlflow vulnerable to Path TraversalMLflowCVE-2024-3573fixed in 2.10.0mlflow vulnerable to Path TraversalMLflowCVE-2024-1560no fix yetmlflow vulnerable to Path TraversalMLflowCVE-2024-1593no fix yetmlflow vulnerable to Path TraversalMLflowCVE-2024-1558fixed in 2.12.1The newest 60. Each project page has the full list.
About Databricks
Databricks, Inc. is an American data and artificial intelligence software company headquartered in San Francisco, California. It was founded in 2013 by the original creators of Apache Spark at the University of California, Berkeley.
Elsewhere on Ibis: Acquisitions · Funding · Paydays · Releases · Repos · TechConf