CVE-2026-53995Proof of concept (PoC) published · CISASuited to automated attack · CISA
MLflow 3.17.1 Path Traversal via Trace ID API
CVSS score
8.8
EPSS probability
—
Risk score
0.9
Published
7 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
MLflow <=3.17.1 path traversal allows trace file writes outside the intended directory. (★0)
Makefile Go / Python
Similar Vulnerabilities
9.3
9.1
CVE-2026-0545Missing Authentication for Critical Function in mlflow/mlflow
Patch status unknown Public Exploits:1EPSS %4
7.5
CVE-2026-2614Arbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflow
Patch verified Public Exploits:1EPSS %3
9.1
CVE-2026-4035Environment Variable Resolution Vulnerability in mlflow/mlflow
Patch verifiedEPSS %1
8.8
8.8
CVE-2026-96775MLflow dspy bypasses pickle deserialization control
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53995"