Low severity · published Jun 4, 2026
CVE-2026-10803
MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash
3.6
CVSS
0.1%
EPSS
No
On KEV
Description
A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ML
MLflow · Mlflow
3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +5 more · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10803
Product
https://github.com/mlflow/mlflow/
Exploit
https://github.com/mlflow/mlflow/issues/22419
Issue Tracking
https://github.com/mlflow/mlflow/pull/22420
Third Party Advisory
https://vuldb.com/cve/CVE-2026-10803
Third Party Advisory
https://vuldb.com/submit/831462
Third Party Advisory
https://vuldb.com/vuln/368252
More from MLflow
9.3
CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
9.8
CVE-2026-116692
MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
8.8
CVE-2026-96804
No description published yet
8.8
CVE-2026-96775
MLflow dspy bypasses pickle deserialization control
8.8
CVE-2026-13484
MLflow Experiment-scoped Label Schema CRUD API authorization