Skip to content
Threat Feed
Subscribe

Tag

Mlflow

2 briefs RSS
low advisory

Security Control Bypass in MLflow

A vulnerability in the MLflow machine learning lifecycle platform allows unauthenticated remote attackers to bypass security controls, resulting in potential data disclosure or unauthorized data manipulation.

MLflow vulnerability data-integrity security-bypass
1t 1c
critical advisory

MLflow Tracking Server Unauthenticated Full-Read SSRF via Webhook Delivery

MLflow Tracking Server versions prior to 3.15.0 are vulnerable to an unauthenticated full-read SSRF attack because the webhook delivery mechanism follows unvalidated HTTP redirects, allowing attackers to exfiltrate internal data or interact with local services.

MLflow Tracking Server +2 ssrf mlflow web-vulnerability
1r 2t 2c updated