PT-2026-30821 · Mlflow · Mlflow

Sławomir Zakrzewski · Published 2026-04-07 · Updated 2026-04-21 · CVE-2026-33866

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MLflow versions prior to 3.10.1

Description An authorization bypass exists in the AJAX endpoint used to download saved model artifacts. Due to missing access-control validation, a user without permissions to a specific experiment can directly query this endpoint to retrieve model artifacts they are not authorized to access.

Recommendations Update to a version newer than 3.10.1.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BIT-MLFLOW-2026-33866

CVE-2026-33866

GHSA-46R5-X6JQ-V8G6

PYSEC-2026-94

Affected Products

Mlflow

References · 11

• 🔥 https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors · Exploit
• https://github.com/mlflow/mlflow/pull/21708 · Patch
• https://osv.dev/vulnerability/PYSEC-2026-94 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mlflow-2026-33866 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-46r5-x6jq-v8g6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33866 · Security Note
• https://github.com/mlflow/mlflow · Note
• https://github.com/mlflow/mlflow/commit/005b959cacda05d1423356cfcbd9ebeda8ff96a7 · Note
• https://twitter.com/CVEnew/status/2043733111616536952 · Twitter Post
• https://twitter.com/infoflowcloud/status/2043733944210800766 · Twitter Post
• https://cert.pl/en/posts/2026/04/CVE-2026-33865 · Note