CVE-2026-53995 - MLflow 3.17.1 Path Traversal via Trace ID API
CVE ID :CVE-2026-53995 Published : Oct. 19, 2026, 9:05 p.m. | 1 hour ago Description :MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID...