●PocketClawAI security alerts
Sign in
highCVSS 7.5NVD status: Modified

CVE-2024-2928

MLflow: A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3.

ComponentMLflow
Severityhigh (CVSS 7.5)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published (NVD)2024-06-06
Last modified2026-06-17
Affected versions
mlflow < 2.11.3
Fixed in2.11.3
WeaknessCWE-29CWE-22
CISA KEVnot listed

NVD description

A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.

Does CVE-2024-2928 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for MLflow.
Check my stack

What to do

  • Upgrade MLflow to 2.11.3 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other MLflow CVEs

high
CVE-2026-96775CVSS 8.8

MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends...

MLflow
2026-09-23high
CVE-2026-96804CVSS 8.8

MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load...

MLflow
2026-09-23high
CVE-2026-79721CVSS 8.6

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to...

MLflow
2026-09-08critical
CVE-2026-64849CVSS 9.3

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior...

MLflow · exploited in the wild (CISA KEV)
2026-08-17high
CVE-2026-69148CVSS 7.1

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateMode...

MLflow
2026-08-17medium
CVE-2026-69146CVSS 6.5

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, L...

MLflow
2026-08-17

All MLflow CVEs