high
MLflow: File manipulation possible
CERT-Bund (BSI) reports one vulnerability in MLflow with severity high. The stated impact is file manipulation. The full description, affected versions and recommended action are available from CERT-Bund (BSI).
- Attack vector
- over the network
- Access needed
- none
What this means for you
Files can be altered or replaced unnoticed. Besides the update, check whether your backups reach back far enough, to before the point when the flaw became known.
Original source
Insights
More articles
Weekly situation, week 42: 107 advisories, 17 critical
Between 11 Oct and 18 Oct 2026 our sources recorded 107 advisories: 17 critical, 90 high.
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Weekly situation, week 40: 80 advisories, 16 critical
Between 27 Sep and 4 Oct 2026 our sources recorded 80 advisories: 16 critical, 64 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.