MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

October 29th, 2026
ZDI-26-840 ZDI-CAN-31894

CVE ID

CVE-2026-118624

CVSS Score

5.4 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected Vendors

MLflow

Affected Products

MLflow

Vulnerability Details

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is required to exploit this vulnerability.

The specific flaw exists within the _find_validator function. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose information in the context of the service account.

Additional Details

Fixed in MLflow 3.16.0
https://github.com/mlflow/mlflow/pull/25069


Disclosure Timeline

  • 2026-06-18 - Vulnerability reported to vendor
  • 2026-10-29 - Coordinated public release of advisory
  • 2026-10-29 - Advisory Updated

Credit

Grigory Dorodnov of TrendAI Research

Back to Advisories