CVE-2026-33866
Medium
Description
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
SeverityMedium
CVSS4.3
Exploit probability—
ProductLfprojects Mlflow
PublishedApr 7, 2026
First seenApr 7, 2026
Weakness typeCWE-862Missing authorization
How to fix
Update
- mlflow3.11.0rc0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lfprojects mlflow | v ≤ 3.10.1 | — |
| mlflowPyPI | v < 3.11.0rc0 | 3.11.0rc0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.