Path Validation Flaw in MLflow by Databricks
CVE-2026-116690

7.5HIGH

Key Information:

Vendor

Mlflow

Status
Mlflow
Vendor
CVE Published:
27 October 2026

What is CVE-2026-116690?

The vulnerability in MLflow, an open-source AI engineering platform, allows remote attackers to exploit a path validation issue in the _create_model_version() function. This occurs due to the acceptance of schemeless relative sources, enabling an attacker to store an unauthorized server-local path as a model version artifact. Additionally, the misinterpretation of mlflow.prompt.is_prompt by tag presence permits unauthorized file access through the /api/2.0/mlflow/model-versions/get-artifact endpoint. Default unauthenticated servers do not require special permissions, rendering them particularly vulnerable to exploitation. The issue has been addressed in MLflow version 3.17.0.

Affected Version(s)

mlflow >= 3.10.0, < 3.17.0

References

https://github.com/mlflow/mlflow/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/mlflow/mlflow/pull/25870
x_refsource_MISC
https://github.com/mlflow/mlflow/commit/81730a2ce4ebcd60d...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.