CVE-2026-0545
This vulnerability allows anyone on the network to run jobs on an mlflow server without authentication. The FastAPI job endpoints are unprotected when basic‑auth is enabled, letting attackers submit, read, search, or cancel jobs. If the jobs perform privileged actions, attackers could execute arbitrary code or modify files.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
mlflow/mlflow (latest version) with FastAPI job endpoints under "/ajax-api/3.0/jobs/*", when basic‑auth is enabled and job execution is turned on (MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true).
Real-world impact
An attacker could run arbitrary code on the server, modify or delete files, or cause denial of service by flooding the job queue. Even if jobs are safe, the lack of authentication could lead to job spam or data exposure.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is network accessible, requires no user interaction, and gives attackers complete control over confidentiality, integrity, and availability. The vector shows no authentication or user interface needed, making it highly critical.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- Apr 3, 2026 · Apr 3, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 21, 2026 · 15d agoAdvisory updatedThe NVD record was last revised.