VulnWatch VulnWatch
← Back to dashboard
Low osv · PYSEC-2026-420

MLflow allowed arbitrary files to be PUT onto the server

Published Jun 29, 2026 CVSS 3.0

MLflow allowed arbitrary files to be PUT onto the server.

Affected AI Products

mlflow
Get the weekly digest. Every Monday: top AI security stories of the week. Free.