CVE-2023-6018

Critical

Advisory

Published 16 Nov 2023In the index since 8 Sept 2026

Severity: Critical; worst across findings
CVSS: 10.0; base score, highest
EPSS: 0.479; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 1; affected package

Remote Code Execution due to Full Controled File Write in mlflow

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
mlflowpypi	1.9.1, 1.25.0, 1.26.1, 1.30.1+3 more	2.9.2	8

OSV records: GHSA-5p3h-7fwh-92rc
Also known as: BIT-mlflow-2023-6018, PYSEC-2026-417

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

mlflow-controllermlflow-deployment-controller

0.1.8

2 of 2 See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
tachyongroup/mlflow-deployment-controller :mlflow-controller-0.1.8	7e79b9000856	mlflow@1.25.0	2.9.2
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	mlflow@2.1.1	2.9.2

Open the chart page →

8,957

mlflow-servermlflowserver

0.1.9

1 of 3 See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
buntha/mlflow :2.1.1	154542cc3083	mlflow@2.1.1	2.9.2

Open the chart page →

5,804

mlflowdeliveryhero

1.0.10

1 of 1 See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
larribas/mlflow :1.9.1	05ccb0b46bfb	mlflow@1.9.1	2.9.2

Open the chart page →

4,422

mlflowhelm-charts-nr

1.0.10

1 of 1 See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
larribas/mlflow :1.9.1	05ccb0b46bfb	mlflow@1.9.1	2.9.2

Open the chart page →

4,422

mlflowkelvins

0.4.0

1 of 3 See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
kelvinsp/mlflow :1.26.1	cd33e6db2a59	mlflow@1.26.1	2.9.2

Open the chart page →

4,156

mlflow-servermlflow-server

0.3.0

1 of 1 See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
ghcr.io/mlops-for-all/mlflow-tracking-server :3.8-1.30.1-v1.0.0	d30e631684c3	mlflow@1.30.1	2.9.2

Open the chart page →

3,158

mlflowmondata-helm-charts

0.2.3

1 of 1 See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-6018.

Container image	Digest	Package	Fixed in
mondata/mlflow :v2.3.0.s3.gc	6f94c6caf8bf	mlflow@2.3.0	2.9.2

Open the chart page →

3,811

mlflowncsa

1.2.1

1 of 4 See more

5,456

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
larribas/mlflow :1.9.1	05ccb0b46bfb	mlflow@1.9.1	2.9.2	2
buntha/mlflow :2.1.1	154542cc3083	mlflow@2.1.1	2.9.2	1
evk02/mlflow :2.2.1	ef6ff257ef35	mlflow@2.2.1	2.9.2	1
kelvinsp/mlflow :1.26.1	cd33e6db2a59	mlflow@1.26.1	2.9.2	1
mondata/mlflow :v2.3.0.s3.gc	6f94c6caf8bf	mlflow@2.3.0	2.9.2	1
tachyongroup/mlflow-deployment-controller :mlflow-controller-0.1.8	7e79b9000856	mlflow@1.25.0	2.9.2	1
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	mlflow@2.1.1	2.9.2	1
ghcr.io/mlops-for-all/mlflow-tracking-server :3.8-1.30.1-v1.0.0	d30e631684c3	mlflow@1.30.1	2.9.2	1