{"id":"CVE-2023-6940","aliases":["GHSA-hvc6-42vf-jhf8","BIT-mlflow-2023-6940","PYSEC-2026-1652"],"title":"mlflow Command Injection vulnerability","summary":"mlflow Command Injection vulnerability","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","vendor":"mlflow","product":"mlflow","ecosystem":"pip","affected":["mlflow < 2.9.2"],"patched":["mlflow 2.9.2"],"published":"2023-12-19","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-hvc6-42vf-jhf8","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6940"},{"url":"https://github.com/mlflow/mlflow/pull/10676"},{"url":"https://github.com/mlflow/mlflow/commit/5139b1087d686fa52e2b087e09da66aff86297b1"},{"url":"https://github.com/mlflow/mlflow/commit/a98a341a7222f894b7735db575ad9311ecaba4e3"},{"url":"https://github.com/mlflow/mlflow"},{"url":"https://github.com/mlflow/mlflow/commits/v2.9.2"},{"url":"https://huntr.com/bounties/c6f59480-ce47-4f78-a3dc-4bd8ca15029c"}],"tags":["osv","pip"],"epss":0.01219,"epssPercentile":0.66852,"ingestedAt":"2026-07-08T18:25:50.319Z","slug":"CVE-2023-6940","body":"## Overview\n\nwith only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.\n\n## Affected packages\n\n- `mlflow < 2.9.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `mlflow 2.9.2`","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}