CVE-2026-0545

Affected versions of the mlflow package are vulnerable to Missing Authentication due to the FastAPI job endpoints mounted under /ajax-api/3.0/jobs/* not enforcing authentication or authorization when the basic-auth app is enabled. When job execution is enabled via MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true and at least one job function is allowlisted, the /ajax-api/3.0/jobs/* routes bypass basic-auth entirely, accepting submit, read, search, and cancel operations from any network client without credentials. An unauthenticated remote attacker can invoke allowlisted jobs, which may yield remote code execution when a job performs privileged actions such as shell execution or filesystem changes, and otherwise enables job spam, Denial of Service, and disclosure of job result data.