ZDI-CAN-29940
HIGH 7.8
Upcoming
Mar 30, 2026
MLflow
MLflow is an open-source machine learning platform used for managing ML experiments, models, and deployments. This high-severity vulnerability requires local access with no authentication or user interaction needed, and if exploited could result in complete compromise of confidentiality, integrity, and availability on the affected system. Security teams should monitor for patches from MLflow and review access controls on systems running this platform, particularly in development and staging environments where it's commonly deployed.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H