MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled

Published May 26, 2026 CVSS 3.0

A vulnerability in MLflow versions

Supply Chain Remote Code Execution

mlflow

Get the weekly digest. Every Monday: top AI security stories of the week. Free.