Bug 2455899 (CVE-2026-33865) - CVE-2026-33865 MLflow: MLflow: Stored Cross-Site Scripting (XSS) via unsafe parsing of MLmodel artifacts
Summary: CVE-2026-33865 MLflow: MLflow: Stored Cross-Site Scripting (XSS) via unsafe p...
Keywords:
Status: NEW
Alias: CVE-2026-33865
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-04-07 13:01 UTC by OSIDB Bzimport
Modified: 2026-06-03 10:22 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-04-07 13:01:31 UTC 
MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authenticated attacker can upload a malicious MLmodel file containing a payload that executes when another user views the artifact in the UI. This allows actions such as session hijacking or performing operations on behalf of the victim. 

This issue affects MLflow version through 3.10.1
Note You need to log in before you can comment on or make changes to this bug.