MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the basic_auth.ini file. The file contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the administrator. Was ZDI-CAN-28256.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote
    attackers to bypass authentication on affected installations of MLflow. Authentication is not required to
    exploit this vulnerability. The specific flaw exists within the basic_auth.ini file. The file contains
    hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and
    execute arbitrary code in the context of the administrator. Was ZDI-CAN-28256. (CVE-2026-2635)

The version of MLflow installed on the remote host is prior to 3.8.0. It is, therefore, affected by an authentication bypass vulnerability:

  - A use of default password vulnerability exists in the basic_auth.ini file. The file     contains hard-coded default credentials that allow remote, unauthenticated attackers     to bypass authentication and execute arbitrary code in the context of the     administrator. (CVE-2026-2635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
438926	SCA: security update for mlflow (GHSA-gq3w-7jj3-x7gr)	Tenable Cloud Security	SCA Checks	Local	high
438926	SCA: security update for mlflow (GHSA-gq3w-7jj3-x7gr)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
299880	MLflow < 3.8.0 Authentication Bypass (ZDI-26-111)	Nessus	Artificial Intelligence	Combined	critical

Detections

Analytics

CVE-2026-2635

high

Tenable Plugins

high

high

critical