agentprime: mlflowEvery new CVE for mlflow.https://agentprime.io/CVE-2026-118628: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118628/https://agentprime.io/advisories/CVE-2026-118628/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:46:07 GMTCVECVE-2026-118627: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118627/https://agentprime.io/advisories/CVE-2026-118627/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:45:58 GMTCVECVE-2026-118626: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118626/https://agentprime.io/advisories/CVE-2026-118626/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:45:50 GMTCVECVE-2026-118625: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118625/https://agentprime.io/advisories/CVE-2026-118625/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:45:41 GMTCVECVE-2026-118624: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118624/https://agentprime.io/advisories/CVE-2026-118624/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:45:30 GMTCVECVE-2026-118623: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-118623/https://agentprime.io/advisories/CVE-2026-118623/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:45:23 GMTCVECVE-2026-96804: CVE-2026-96804https://agentprime.io/advisories/CVE-2026-96804/https://agentprime.io/advisories/CVE-2026-96804/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 16:35:05 GMTCVECVE-2026-96775: MLflow dspy bypasses pickle deserialization controlhttps://agentprime.io/advisories/CVE-2026-96775/https://agentprime.io/advisories/CVE-2026-96775/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 16:28:59 GMTCVECVE-2026-79721: mlflow: Code execution can occur in versions of the MLflow platform running version 0.0.1 or…https://agentprime.io/advisories/CVE-2026-79721/https://agentprime.io/advisories/CVE-2026-79721/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 18:10:27 GMTCVECVE-2026-13484: MLflow Experiment-scoped Label Schema CRUD API authorizationhttps://agentprime.io/advisories/CVE-2026-13484/https://agentprime.io/advisories/CVE-2026-13484/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 Jun 2026 08:30:09 GMTCVE