Loading...
Skip to main content
GeekWala

CVE-2026-2635

CRITICAL

MLflow Use of Default Password Authentication Bypass Vulnerability

Published February 21, 2026Updated June 29, 2026Source: osv

Summary

This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the basic_auth.ini file. The file contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the administrator.

Remediation

Upgrade to the fixed version using your package manager.

pip
Update mlflow to 3.8.0rc0 or later
pip install "mlflow>=3.8.0rc0"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

PackageEcosystemAffectedFixed In
mlflow
pypi
0.0.1, 0.1.0, 0.2.0, 0.2.1 (+160 more)3.8.0rc0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2026-2635?
MLflow Use of Default Password Authentication Bypass Vulnerability This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2026-2635?
CVE-2026-2635 affects mlflow. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-2635 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-gq3w-7jj3-x7gr
PYSEC-2026-421

Related CVEs

  • CVE-2026-0545
    CRITICAL

    mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization

  • CVE-2023-6015
    CRITICAL

    MLflow allowed arbitrary files to be PUT onto the server

  • CVE-2026-0596
    CRITICAL

    Mlflow: Command Injection when serving models with enable_mlserver=True

  • CVE-2026-64849
    CRITICAL

    MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

  • CVE-2026-2611
    CRITICAL

    MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution

  • CVE-2026-64849
    CRITICAL

    MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

  • CVE-2026-4035
    CRITICAL

    MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration

  • CVE-2026-0596
    CRITICAL

    Mlflow: Command Injection when serving models with enable_mlserver=True

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies