ZDI-CAN-29940 HIGH 7.8 Upcoming Mar 30, 2026

MLflow

MLflow is an open-source machine learning platform used for managing ML experiments, models, and deployments. This high-severity vulnerability requires local access with no authentication or user interaction needed, and if exploited could result in complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for patches from MLflow and review access controls on systems running this platform, particularly in development and staging environments where it's commonly deployed.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy