MLflow Tracking Server issues missing authorization allows privilege escalation
Authenticated remote attackers can raise privileges; ZDI rates CVE-2026-118626 at CVSS 5.4, with no fix listed.
34
Authenticated remote attackers can raise privileges; ZDI rates CVE-2026-118626 at CVSS 5.4, with no fix listed.
Today 42 readers · 42 views · 34 reads · all time 158K views