MLflow Tracking Server missing authorization allows privilege escalation
Authenticated remote attackers can escalate privileges; ZDI scores CVE-2026-118625 at CVSS 6.3.
36
Authenticated remote attackers can escalate privileges; ZDI scores CVE-2026-118625 at CVSS 6.3.
Today 42 readers · 42 views · 34 reads · all time 158K views