CVE-2026-118624 MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-118624

The MLflow Tracking Server is vulnerable to an information disclosure flaw within the _find_validator function. This vulnerability stems from a missing authorization check before allowing access to specific functionality. An authenticated remote attacker can exploit this flaw to disclose sensitiv...