Authorization Flaw in MLflow Tracking Server Allows Privilege Escalation
CVE-2026-118625

6.3MEDIUM

Key Information:

Vendor

Mlflow

Status
Mlflow
Vendor
CVE Published:
3 November 2026

What is CVE-2026-118625?

The MLflow Tracking Server features a critical vulnerability due to improper authorization checks in the get_endpoints function. This flaw allows authenticated attackers to escalate their privileges, gaining unauthorized access to resources that should be restricted. Exploitation of this vulnerability can lead to severe security implications for affected installations, potentially allowing attackers to manipulate data or execute unauthorized actions. It is essential for organizations utilizing MLflow to implement necessary security measures and apply the latest updates to mitigate this risk.

Affected Version(s)

MLflow 3.14.0

References

https://www.zerodayinitiative.com/advisories/ZDI-26-841/
x_research-advisory

CVSS V3.0

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.