Database/AI/ML frameworks & serving
MLflow (jobs API): `/ajax-api/3.0/jobs/*` unauthenticated even with basic-auth enabled
CVE-2026-0545AI/ML frameworks & servingcurated
Impact
/ajax-api/3.0/jobs/* unauthenticated even with basic-auth enabled
Who can reach it
Unauthenticated network
What to do
Upgrade; auth coverage gaps recur across MLflow releases
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.