Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-53995

1 brief RSS
medium advisory

Path Traversal in MLflow FileStore via CVE-2026-53995

MLflow FileStore is vulnerable to a path traversal attack allowing arbitrary file creation through malicious trace_id parameters in the start_trace_v3 API endpoint.

MLflow path-traversal cve-2026-53995 vulnerability
1t