https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:48:29.132824+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6018 CVE-2023-6018 — MLflow Arbitrary File Write 2026-10-02T15:48:29.134752+00:00

Affected: mlflow/mlflow

An attacker can overwrite any file on the server hosting MLflow without any authentication.

 https://cve.radiocsirt.org/vuln/ghsa-5p3h-7fwh-92rc GHSA-5p3h-7fwh-92rc — Remote Code Execution due to Full Controled File Write in mlflow 2026-10-02T15:48:29.134806+00:00

Affected: PyPI: mlflow

The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/<user>/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.