Two MLflow flaws landed the same day, and both advisory titles end with the words unauthenticated MLflow servers
2026-10-29AI
CVE-2026-116692 is a 9.8 that runs code through scorer deserialization. CVE-2026-116690 reads files off the host. Both are fixed in 3.17.0, and both describe the way most tracking servers are actually deployed.