https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T21:48:39.685798+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mlflow-2024-1594 BIT-mlflow-2024-1594 — Local File Read via Path Traversal in mlflow/mlflow 2026-10-24T21:48:39.772886+00:00

Affected: Bitnami: mlflow

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.

 https://cve.radiocsirt.org/vuln/euvd-2026-1718 EUVD-2026-1718 2026-10-24T21:48:39.772948+00:00 EUVD-2026-1718 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1594 fkie_cve-2024-1594 2026-10-24T21:48:39.772966+00:00

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.

 https://cve.radiocsirt.org/vuln/ghsa-m49c-5c52-6696 GHSA-m49c-5c52-6696 — mlflow vulnerable to Path Traversal 2026-10-24T21:48:39.772993+00:00

Affected: PyPI: mlflow

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.

 https://cve.radiocsirt.org/vuln/gsd-2024-1594 gsd-2024-1594 2026-10-24T21:48:39.773017+00:00 gsd-2024-1594 https://cve.radiocsirt.org/vuln/pysec-2026-1655 PYSEC-2026-1655 — mlflow vulnerable to Path Traversal 2026-10-24T21:48:39.773029+00:00

Affected: PyPI: mlflow

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.