MLflow CVEs published: critical scorer RCE and an actively exploited file-read bug; upgrade to 3.17.0
CVE records published on October 27 cover two MLflow flaws. CVE-2026-116692 (CVSS 9.8) lets attackers run code through third-party scorer deserialization, and unauthenticated servers in versions 3.12 to 3.16.x are exposed. CVE-2026-116690 is an unauthenticated arbitrary file read, and honeypots caught exploit attempts within a day. Both are fixed in MLflow 3.17.0.
Why it matters
Self-hosted MLflow tracking servers are often reachable on internal networks without auth; patch and check exposure now.