ZDI 2026-02-19

ZDI-26-111: MLflow Use of Default Password Authentication Bypass Vulnerability

CVE-2026-2635

Machine-generated analysis · WAYSCloud LLM

The advisory notes a default password authentication bypass in MLflow that does not require authentication to exploit.

Context

The affected product is MLflow, a machine learning lifecycle platform. The vulnerability is an authentication bypass due to use of default credentials. The advisory states the issue can be exploited remotely without requiring prior authentication. Worth noting is that the CVSS score is rated 9.8, indicating high severity according to the scoring system.

Operator considerations

Check: Verify if MLflow instances are configured with default credentials.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-2635.

Read the full advisory on ZDI →