Is there a patch available for CVE-2026-33866?

Yes, a patch is available for CVE-2026-33866. Update the affected software to the latest version immediately.

Red Hat CVE-2026-33866

Q: What is the CVSS score of CVE-2026-33866?

CVE-2026-33866 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19609 MEDIUM

Missing Authorization (CWE-862)

2026-04-07 CERT-PL

GHSA-46r5-x6jq-v8g6

Authentication Bypass Red Hat

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Red Hat

6.5 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 07, 2026 - 13:00 euvd

EUVD-2026-19609

Analysis Generated

Apr 07, 2026 - 13:00 vuln.today

Patch released

Apr 07, 2026 - 13:00 nvd

Patch available

CVE Published

Apr 07, 2026 - 12:57 nvd

MEDIUM 5.3

DescriptionCVE.org

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.

This issue affects MLflow version through 3.10.1

AnalysisAI

MLflow through version 3.10.1 allows authenticated users to bypass authorization controls and download model artifacts from experiments they lack permission to access via an unprotected AJAX endpoint. The vulnerability requires valid MLflow authentication but no special privileges, enabling lateral access to restricted experiment data. Patch availability confirmed via upstream pull request; CISA SSVC assessment indicates partial technical impact with automatable exploitation path but no confirmed active exploitation.

Technical ContextAI

MLflow is an open-source machine learning platform for experiment tracking and model management. The vulnerability exists in the AJAX endpoint responsible for downloading saved model artifacts-a REST-based interface commonly used for programmatic artifact retrieval. The root cause is missing access-control validation (CWE-862: Improper Authorization), meaning the endpoint fails to verify whether the requesting authenticated user has read permissions on the target experiment before serving artifacts. Any authenticated MLflow user can construct requests to this endpoint specifying arbitrary experiment identifiers, bypassing the authorization model that normally restricts artifact visibility to authorized personnel. The affected scope spans MLflow versions 0 through 3.10.1 across all platform instances where the software is deployed (cpe:2.3:a:mlflow:mlflow:*:*:*:*:*:*:*:*).

RemediationAI

Upgrade MLflow to the patched version released after 3.10.1; exact fix version designation should be confirmed from the upstream pull request at https://github.com/mlflow/mlflow/pull/21708 and corresponding tagged release. Until patching is feasible, restrict MLflow API endpoint access via network-layer controls (firewall rules, reverse-proxy authentication) to limit authenticated user access, and audit access logs for suspicious cross-experiment artifact downloads. Organizations should review deployed MLflow instances for version compliance and prioritize upgrades given the simple automatable exploitation path and confirmed authorization bypass. Vendor advisory details are available from CERT-PL at https://cert.pl/en/posts/2026/04/CVE-2026-33865/.