1 matches found
CVE-2026-0545: Missing Authentication for Critical Function
In mlflow/mlflow, the FastAPI job endpoints under /ajax-api/3.0/jobs/ are not protected by authentication or authorization when the basic-auth app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled MLFLOWSERVERENABLEJOBEXECUTION=true and any j...
9.8CVSS6.3AI score0.04392EPSS
SaveExploits1References3
20