ZDI-CAN-29941 HIGH 7.8 Upcoming Mar 30, 2026

MLflow

MLflow is an open-source machine learning platform used for managing ML workflows, experiments, and model deployment. This local privilege escalation vulnerability has a high severity rating and requires user interaction to exploit, but once triggered grants an attacker complete control over confidentiality, integrity, and authentication on the affected system. Security teams should monitor for patches from MLflow and review access controls on systems running MLflow, particularly in environments handling sensitive ML models or data.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy