MLflow Tracking Server missing authorization allows privilege escalation
Original title: ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
Authenticated remote attackers can escalate privileges; ZDI scores CVE-2026-118625 at CVSS 6.3.
ZDI-26-841 describes a missing-authorization vulnerability in the MLflow Tracking Server. A remote attacker who is already authenticated can escalate privileges on affected installations. ZDI assigned CVE-2026-118625 a CVSS rating of 6.3. The published text gives no version range, fix, or exploitation status.
Unconfirmed: Affected versions, a fix, and whether attackers exploit it are not stated.
- Exploitation requires authentication.
- The ZDI identifier is ZDI-26-841.
- No patched version is named in the notice.
Impact: authenticated remote privilege escalation on MLflow
| Product | Affected |
|---|---|
| MLflow Tracking Server | — |
- CVEs
- CVE-2026-118625
- Products
- MLflowMLflow Tracking Server
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-118625 | — | — | — |
From the original article
This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.