CVE-2026-0545 Scanner
CVE-2026-0545 Scanner - Authentication Bypass vulnerability in MLflow
Used 2.5k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-0545
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled (`MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true`) and any job function is allowlisted, any network client can submit, read, search, and cancel jobs without credentials, bypassing basic-auth entirely. This can lead to unauthenticated remote code execution if allowed jobs perform privileged actions such as shell execution or filesystem changes. Even if jobs are deemed safe, this still constitutes an authentication bypass, potentially resulting in job spam, denial of service (DoS), or data exposure in job results.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
mlflow/mlflowred hat openshift ai 3.4red hat openshift ai (rhoai)
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: mlflow/mlflow
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →