A vulnerability, which was classified as critical, was found in MLflow up to 3.0. This vulnerability affects unknown code of the component FastAPI Job Endpoint. The manipulation results in missing authentication. This vulnerability is reported as CVE-2026-0545. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.
| Vendor | Product | Versions |
|---|---|---|
| mlflow | mlflow/mlflow | unspecified, 3.0 |
Updated affected versions to include 3.0 and corrected exploit availability to false.
Initial creation
