CVE-2023-3765: Lfprojects MLflow

Critical severity, CVSS 10.0. EPSS: 67.6% chance of exploitation in the next 30 days.

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

Affected products

• Lfprojects MLflow: before 2.5.0 (fixed in 2.5.0)

Published 2023-07-19. Last modified 2026-06-17.