Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · MLflow

CVE-2024-27133: MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution

criticalCVSS 3.1 9.6GHSA-3v79-q7ph-j75h

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.

Published Feb 24, 2024 · Updated Mar 15, 2026

Affected packages

mlflow

Ecosystem
PyPI
Affected
< 2.10.0
Fixed in
2.10.0
Check
pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.

Credited to oscerd, gabby202308.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries