ZDI-CAN-29942
HIGH 7.8
Upcoming
Mar 30, 2026
MLflow
MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment. This vulnerability has a high severity rating (7.8) and can be exploited locally by an unauthenticated attacker with user interaction, resulting in high impact to confidentiality, integrity, and availability. Security teams should monitor for patches and restrict local access to MLflow instances until updates are available, particularly in development and production environments handling sensitive model data.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative
Reported
March 30, 2026
Deadline
July 28, 2026
103d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H