CVE-2026-2651Disclosure(lfprojects / mlflow)

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch lfprojects mlflow systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/*` endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.

lfprojects CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/mlflow/mlflow/commit/d7290811d8f3c95366d80109424edc1fb1ad966f

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-862CWE-1220

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mlflow

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-05-25); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

lfprojects

Products

mlflow

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-2651

Full discourse2 posts

Upwind Security MDR@UpwindMDR136d
Disclosure
🚨 Critical - MLflow Missing Authorization → Model Supply Chain Poisoning (CVE-2026-2651) A missing authorization check on the /mlflow-artifacts/mpu/* endpoints allows any authenticated user to overwrite artifacts belonging to other users when --serve-artifacts mode is enabled. An attacker can silently replace a legitimate model with a malicious one, leading to arbitrary code execution when the compromised artifact is loaded downstream (CVSS 9.0). 👉 Affected: mlflow (pip) ≤ 3.10.1.dev0 with --serve-artifacts enabled | Upgrade to 3.10.0
Post summary
A critical CVE-2026-2651 in MLflow allows authenticated users to overwrite artifacts and execute arbitrary code; upgrading to 3.10.0 removes the vulnerability.
0001086
196 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-2651 A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The author… https://www.cve.org/CVERecord?id=CVE-2026-2651
Post summary
The text briefly announces CVE-2026-2651, noting unauthorized access to MPU endpoints in MLflow, with no additional technical details, PoC, exploit, or patch information.
00000203
57.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	lfprojects	mlflow	-	-	-

Explore more

Back to dashboard lfprojects CVEs mlflow vulnerabilities