ZDI-CAN-29513
HIGH 7.8
Upcoming
Mar 25, 2026
MLflow
MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment. This high-severity vulnerability requires local access with no authentication or user interaction required, allowing an attacker to achieve complete compromise including confidentiality, integrity, and availability impacts. Security teams should monitor for patches from MLflow and audit any systems running vulnerable versions, particularly those in development or production ML environments.
Advisory Details
Researcher
Anonymous
Reported
March 25, 2026
Deadline
July 23, 2026
98d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H