CVE-2023-43472: Lfprojects MLflow

High severity, CVSS 7.5. EPSS: 36.6% chance of exploitation in the next 30 days.

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

Affected products

• Lfprojects MLflow: up to and including 2.8.1

Published 2023-12-05. Last modified 2026-06-17.