CVE-2026-116690

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in _create_model_version() accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and mlflow.prompt.is_prompt is interpreted by tag presence rather than a true value. A remote caller can store a server-local path as the model version artifact location and use /api/2.0/mlflow/model-versions/get-artifact to read files accessible to the MLflow server process. Default unauthenticated servers require no privileges, while basic-auth deployments are exposed to authenticated users who can create registered models. This issue is fixed in version 3.17.0.

• CWE-22

• https://github.com/mlflow/mlflow/commit/81730a2ce4ebcd60d5d18f68c96f422ad7e30772
• https://github.com/mlflow/mlflow/pull/25870
• https://github.com/mlflow/mlflow/releases/tag/v3.17.0
• https://github.com/mlflow/mlflow/security/advisories/GHSA-m65p-9j7q-6w33

Published

Oct 27, 2026

Last Modified

Oct 28, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116685The Model Context Protocol Python SDK is the official Python…5.9
• CVE-2026-116686The Model Context Protocol Python SDK is the official Python…6.5
• CVE-2026-116687CKEditor 5 is a modern JavaScript rich-text editor with an M…3.1
• CVE-2026-116688CKEditor 5 is a modern JavaScript rich-text editor with an M…8.1
• CVE-2026-116689follow-redirects is a Node.js HTTP and HTTPS client wrapper …5.9
• CVE-2026-11669Out of bounds read in Media in Google Chrome on ChromeOS pri…5.3
• CVE-2026-116691MLflow is an open source AI engineering platform for agents,…6.5
• CVE-2026-116692MLflow is an open source AI engineering platform for agents,…9.8
• CVE-2026-116693dd-trace is the Datadog APM client for Node.js. From 2.0.0 u…8.7
• CVE-2026-116694OpenTelemetry Python provides the Python API and SDK for Ope…6.3
• CVE-2026-116695Crass is a Ruby CSS parser that is compliant with the CSS Sy…5.3
• CVE-2026-116696russh is a Rust SSH client and server library that includes …3.3