---
id: CVE-2026-118624
title: >-
  MLflow Tracking Server Jobs Missing Authorization Information Disclosure
  Vulnerability
summary: >-
  MLflow Tracking Server Jobs Missing Authorization Information Disclosure
  Vulnerability. This vulnerability allows remote attackers to disclose
  sensitive information on affected installations of MLflow. Authentication is
  required to explo…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-862
vendor: MLflow
product: MLflow
affected:
  - MLflow 3.13.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-04T14:59:32.799301Z'
published: '2026-11-03'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T15:18:58.649Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118624'
references:
  - url: 'https://www.zerodayinitiative.com/advisories/ZDI-26-840/'
    label: ZDI-26-840
tags:
  - cve.org
epss: 0.00365
epssPercentile: 0.30528
zeroDay: true
ingestedAt: '2026-11-05T21:36:00.437Z'
---

## Overview

MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is required to exploit this vulnerability.

The specific flaw exists within the _find_validator function. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-31894.

## Affected

- `MLflow 3.13.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.