ZDI-CAN-29942 HIGH 7.8 Upcoming Mar 30, 2026

MLflow

MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment. This vulnerability has a high severity rating (7.8) and can be exploited locally by an unauthenticated attacker with user interaction, resulting in high impact to confidentiality, integrity, and availability. Security teams should monitor for patches and restrict local access to MLflow instances until updates are available, particularly in development and production environments handling sensitive model data.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 30, 2026
Deadline July 28, 2026 103d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy