Low
osv
·
PYSEC-2026-1661
Information exposure in MLflow
Published Jul 7, 2026
CVSS 3.1
An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.
Affected AI Products
mlflow