ZDI-CAN-29513 HIGH 7.8 Upcoming Mar 25, 2026

MLflow

MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment. This high-severity vulnerability requires local access with no authentication or user interaction required, allowing an attacker to achieve complete compromise including confidentiality, integrity, and availability impacts. Security teams should monitor for patches from MLflow and audit any systems running vulnerable versions, particularly those in development or production ML environments.

Advisory Details
Researcher Anonymous
Reported March 25, 2026
Deadline July 23, 2026 98d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy