diff --git a/assets/large_language_models/rag/environments/rag_embeddings/context/conda_dependencies.yaml b/assets/large_language_models/rag/environments/rag_embeddings/context/conda_dependencies.yaml
index a9392faa54..bffe3cfd26 100644
--- a/assets/large_language_models/rag/environments/rag_embeddings/context/conda_dependencies.yaml
+++ b/assets/large_language_models/rag/environments/rag_embeddings/context/conda_dependencies.yaml
@@ -17,6 +17,7 @@ dependencies:
     # Azure ML packages
   - azureml-contrib-services
   - azureml-inference-server-http>=1.4.1 #Upgrading version to ensure flask-cors>=6.0.0 is installed
+  - mlflow>=3.0.0 # security update GHSA-5cvj-7rg6-jggj
   - azureml-mlflow=={{latest-pypi-version}}
   - azureml-telemetry=={{latest-pypi-version}}
     # More packages needed for RAG extras
@@ -36,7 +37,6 @@ dependencies:
   - unstructured # explicitly install for [document_parsing]
     # Other public packages
   - datasets~=2.10.1
-  - mlflow>=2.6.0
   - polling2~=0.5.0
   - psutil~=5.8.0
   - pymssql==2.2.7