logo

Database

Server-side request forgery (SSRF) In mlflow

Description

MLFlow SSRF via gateway_proxy_handler gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-529672. NVD-2025-529673. OSV-2025-529674. GCVE-2025-52967

References

1. https://github.com/mlflow/mlflow/issues/159442. https://github.com/mlflow/mlflow/pull/159703. https://github.com/mlflow/mlflow/releases/tag/v2.22.24. https://github.com/mlflow/mlflow/releases/tag/v3.1.05. https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2025-52.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.