CVE-2026-33866 — Authorization Bypass in MLflow AJAX Endpoint

Affected: Mlflow

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.

This issue affects MLflow version through 3.10.1

GHSA-46r5-x6jq-v8g6 — MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

Affected: PyPI: mlflow

This issue affects MLflow version through 3.10.1

Most recent entries from all

CVE-2026-33866 — Authorization Bypass in MLflow AJAX Endpoint

GHSA-46r5-x6jq-v8g6 — MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint