Vulnerability · Published Feb 20, 2026 · Assigned by zdi

CVE-2026-2635MLflow Use of Default Password Authentication Bypass Vulnerability

High 7.3

In plain English

A high-severity hard-coded credentials in MLflow from MLflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)1.1%top 34.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the basic_auth.ini file. The file contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the administrator. Was ZDI-CAN-28256.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	mlflow	3.8.0rc0	GHSA-gq3w-7jj3-x7gr
PyPI	mlflow	3.8.0rc0	PYSEC-2026-421

Affected products (as reported)

Vendor	Product	Versions
MLflow	MLflow	3.4.0

Weakness: CWE-1393, CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

ZDI-26-111 x_research-advisory
vendor-provided URL vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-2635 vdb-entry, x_refsource_REDHAT
RHBZ#2441514 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2635.json x_sadp-csaf-vex