ZeroDay Findings
Sign inSign up

Findings

CVE-2026-2651

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled.

Published May 25, 2026 · updated Jul 21, 2026 · lfprojects mlflow

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled. The authorization logic does not enforce resource-level permission checks for endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. May 25, 2026 · NIST NVD

    Detected

    A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled. The authorization logic does not enforce resource-level permission checks for endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code executi

  2. Jul 21, 2026 · NIST NVD

    Updated

    A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled. The authorization logic does not enforce resource-level permission checks for endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code executi

Affected

  • cpe lfprojects/mlflowversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-2651

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-2651

    A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the mode is enabled. The authorization logic does not enforce resource-level permission checks for endpoints, enablin

    nvd.nist.gov

References