MLflow

Records176All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high100CVSS 7.0–8.9

Exploited now

MLflow records in CISA KEV

TI-2026-46366 MLflow Server-Side Request Forgery Vulnerability CRITICAL 97KEV 2026-08-19

Components

Products in the NVD configurations · select one to filter the records

Mlflow 77 records CRITICAL Valkey 5 records HIGH Mcp Python Sdk 4 records LOW Model Context Protocol Servers 4 records MEDIUM Apptainer 3 records LOW Mcp Go Sdk 3 records LOW Mcp Registry 3 records MEDIUM Mcp Typescript Sdk 3 records HIGH

Records

4 records in Model Context Protocol Servers · all components

TI-2025-41724 CVE-2025-68143 · GHSA-5cgr-j3jf-jw3v

mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations

MEDIUM 46

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).

CVSS 4.0MEDIUM 6.5 Network No auth User interaction EPSS 0.08134 Published 2025-12-17 Fixed in 2025.9.25 CWE-22

TI-2025-41726 CVE-2025-68145 · GHSA-j22h-9j4x-23w5

mcp-server-git has missing path validation when using --repository flag

MEDIUM 44

In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repo_path arguments in subsequent tool…

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.07032 Published 2025-12-17 Fixed in 2025.12.17, 2025.12.18 CWE-22

TI-2025-41725 CVE-2025-68144 · GHSA-9xwc-hfwc-8w59

mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files

MEDIUM 44

In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.07209 Published 2025-12-17 Fixed in 2025.12.17, 2025.12.18 CWE-88

TI-2026-22095 CVE-2026-27735 · GHSA-vjqx-cfc4-9h6v

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

LOW 28

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.00345 Published 2026-02-25 Fixed in 2026.1.14 CWE-22

Open these records in search →

Critical	24
High	100
Medium	43
Low	8
No CVSS	1