What’s Vulnerable › Vulnerabilities

CVE-2026-33866: Authorization Bypass in MLflow AJAX Endpoint

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-04-07 · updated 2026-06-17
• Weakness: CWE-862

Description

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1

Affected products

• mlflow/mlflow: through 3.10.1

References

• https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors
• https://cert.pl/en/posts/2026/04/CVE-2026-33865/
• https://github.com/mlflow/mlflow/pull/21708

Get alerted when CVE-2026-33866 or the next vulnerability affects your stack