CVE-2026-33866 — Authorization Bypass in MLflow AJAX Endpoint
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without perm…
Published: 2026-04-07 · CVSS: 5.3 · CVSS 4.0
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7