Low
osv
·
PYSEC-2026-1662
MLflow Path Traversal Vulnerability
Published Jul 7, 2026
CVSS 3.0
This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.
Affected AI Products
mlflow