ZDI-CAN-29941
HIGH 7.8
Upcoming
Mar 30, 2026
MLflow
MLflow is an open-source machine learning platform used for managing ML workflows, experiments, and model deployment. This local privilege escalation vulnerability has a high severity rating and requires user interaction to exploit, but once triggered grants an attacker complete control over confidentiality, integrity, and authentication on the affected system. Security teams should monitor for patches from MLflow and review access controls on systems running MLflow, particularly in environments handling sensitive ML models or data.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H