PYSEC-2026-1652
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/mlflow/PYSEC-2026-1652.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-1652
- Aliases
- Published
- 2026-07-07T11:45:28Z
- Modified
- 2026-07-07T17:57:30Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- mlflow Command Injection vulnerability
- Details
-
with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2023-6940
- https://github.com/mlflow/mlflow/pull/10676
- https://github.com/mlflow/mlflow/commit/5139b1087d686fa52e2b087e09da66aff86297b1
- https://github.com/mlflow/mlflow/commit/a98a341a7222f894b7735db575ad9311ecaba4e3
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/commits/v2.9.2
- https://huntr.com/bounties/c6f59480-ce47-4f78-a3dc-4bd8ca15029c
- https://pypi.org/project/mlflow
- https://github.com/advisories/GHSA-hvc6-42vf-jhf8
Affected packages
PyPI / mlflow
Package
- Name
- mlflow
- View open source insights on deps.dev
- Purl
- pkg:pypi/mlflow
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.9.2
Affected versions
0.*
0.0.1
0.1.0
0.2.0
0.2.1
0.3.0
0.4.0
0.4.1
0.4.2
0.5.0
0.5.1
0.5.2
0.6.0
0.7.0
0.8.0
0.8.1
0.8.2
0.9.0
0.9.0.1
0.9.1
1.*
1.0.0
1.1.0
1.1.1.dev0
1.2.0
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.9.0
1.9.1
1.10.0
1.11.0
1.12.0
1.12.1
1.13
1.13.1
1.14.0
1.14.1
1.15.0
1.16.0
1.17.0
1.18.0
1.19.0
1.20.0
1.20.1
1.20.2
1.21.0
1.22.0
1.23.0
1.23.1
1.24.0
1.25.0
1.25.1
1.26.0
1.26.1
1.27.0
1.28.0
1.29.0
1.30.0
1.30.1
2.*
2.0.0rc0
2.0.0
2.0.1
2.1.0
2.1.1
2.2.0
2.2.1
2.2.2
2.3.0
2.3.1
2.3.2
2.4.0
2.4.1
2.4.2
2.5.0
2.6.0
2.7.0
2.7.1
2.8.0
2.8.1
2.9.0
2.9.1