Log in Start free

Vulnerability · Published May 25, 2026 · Assigned by @huntr_ai

CVE-2026-2651Missing Authorization Validation in mlflow/mlflow

Critical 9.0

In plain English

A critical-severity missing authorization in mlflow/mlflow from mlflow. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.0Critical
Exploit odds (30 days)0.3%top 71.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/*` endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPImlflow3.10.0GHSA-8c7q-86fq-vvmh
PyPImlflow3.11.0rc0PYSEC-2026-2220

Affected products (as reported)

VendorProductVersions
mlflow mlflow/mlflow unspecified – before 3.10.0

Weakness: CWE-862, CWE-1220 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References