MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116690 · Microsoft / collected KEV context

cve-program · CVE-2026-116690

• https://github.com/mlflow/mlflow/security/advisories/GHSA-m65p-9j7q-6w33
• https://github.com/mlflow/mlflow/pull/25870
• https://github.com/mlflow/mlflow/commit/81730a2ce4ebcd60d5d18f68c96f422ad7e30772
• https://github.com/mlflow/mlflow/releases/tag/v3.17.0

• MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source · Newly collected advisory · 27 Oct 2026