6.3
Medium
CVE-2026-118625 MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
Description
MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the get_endpoints function. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user. Was ZDI-CAN-32107.
CVSS 3.0 detail
Vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitable remotely over the network, with an ordinary account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MLflow | 3.14.0 | No fix stated |
References
- ZDI-26-841 www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of MLflow
The 38 CVEs of MLflow →
CVE-2026-118628
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
8.2
High
CVE-2026-118627
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
7.8
High
CVE-2026-118626
MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
5.4
Medium
CVE-2026-118624
MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability
5.4
Medium