CVE-2026-118625 | MLflow Tracking Server improper authorization

October 29, 2026 Yanac

A vulnerability was found in MLflow. It has been rated as critical. The impacted element is an unknown function of the component Tracking Server. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-118625. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More