PyPI/mlflow CVE-2026-33866: medium 4.3, EPSS 0.36%

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

Action: Upgrade mlflow to 3.11.0rc0 or later.

pip install mlflow==3.11.0rc0

Affected

Fixed versions

Sources

• osv: GHSA-46r5-x6jq-v8g6
• https://nvd.nist.gov/vuln/detail/CVE-2026-33866
• https://github.com/mlflow/mlflow/pull/21708
• https://github.com/mlflow/mlflow/commit/005b959cacda05d1423356cfcbd9ebeda8ff96a7
• https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors
• https://cert.pl/en/posts/2026/04/CVE-2026-33865
• https://github.com/mlflow/mlflow
• https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-94.yaml

CVE-2026-33866 · published 2026-04-07T15:30:50Z · modified 2026-09-10T03:50:42.818312809Z · JSON