access.redhat.comvdb entry
https://access.redhat.com/security/cve/CVE-2026-0545 CVE-2026-0545
CRITICALNuclei
Missing Authentication for Critical Function in mlflow/mlflow
Record summary
CVE-2026-0545 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.
Description
In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled (`MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true`) and any job function is allowlisted, any network client can submit, read, search, and cancel jobs without credentials, bypassing basic-auth entirely. This can lead to unauthenticated remote code execution if allowed jobs perform privileged actions such as shell execution or filesystem changes. Even if jobs are deemed safe, this still constitutes an authentication bypass, potentially resulting in job spam, denial of service (DoS), or data exposure in job results.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 3, 2026 · Source: CVE List
Affected products and versions
Showing 12 of 21| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-th06-cpu-torch210-py312-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-th06-cuda130-torch210-py312-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-th06-rocm64-torch291-py312-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-training-cuda128-torch29-py312-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9Default status: affected | CVE List | Version data not supplied | |
Nuclei templates
1ProjectDiscoveryCRITICALMLflow Job API - Authentication BypassCVSS 9.1
MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/* when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions.
Impact
Unauthenticated attackers can execute jobs remotely, potentially leading to remote code execution, denial of service, or data exposure.
Remediation
Update to the latest version with fixed authentication enforcement on job endpoints.
WeaknessesCWE-306
AuthorsDhiyaneshDk
Template tagscvecve2026mlflowauth-bypass
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Shodan: title:"MLflow"
FOFA: title="MLflow"
https://huntr.com/bounties/b2e5b028-9541-4d29-8703-a76f1a3734d8 https://nvd.nist.gov/vuln/detail/CVE-2026-0545 https://github.com/mlflow/mlflow
Source: ProjectDiscovery
References
6RHBZ#2454889issue tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2454889 github.com
https://github.com/mlflow/mlflow huntr.com
https://huntr.com/bounties/b2e5b028-9541-4d29-8703-a76f1a3734d8 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-0545 security.access.redhat.comx_sadp csaf vex
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0545.json