Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#MLflow

1 articles

Deep Dive

MLflow Unauthenticated RCE on Tracking Servers (CVE-2026-116692)

CVE-2026-116692 (CVSS 9.8) lets any caller of a default MLflow 3.12.0-3.16.x tracking server upload and run Python code as the server process; fixed in 3.17.0.

Ostorlab Team
Oct 28, 2026