CVE-2026-10803: MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash
A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digestutils of the file mlflow/data/digestutils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
MLflowfrom your environment.If feasible, uninstall or stop running MLflow instances (versions up to 3.10.0 are reported affected) until an official fix is released or a secure workaround is provided.
- Compensating control
Isolate MLflow runtimes and restrict access: run MLflow in a hardened sandbox/container with least privilege, restrict network access to trusted hosts and IPs (or bind services to localhost only), and apply host-level firewall/ACL rules to prevent untrusted local or remote execution that could trigger the weak-hash code path.
- Operational
Monitor the MLflow project and relevant security advisories for a published fix addressing mlflow.data.digest_utils; when a fixed version or patch is released, apply it promptly. In the interim, monitor for indicators of exploitation (logs, unexpected process activity) because an exploit has been published.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10803?
The severity of CVE-2026-10803 is rated as low with a score of 3.6.
What component is affected by CVE-2026-10803?
CVE-2026-10803 affects the Dataset Digest Computation component in the mlflow.data.digest_utils module.
How do I fix CVE-2026-10803?
To fix CVE-2026-10803, update MLflow to version 3.10.1 or later.
What kind of attack can be launched due to CVE-2026-10803?
CVE-2026-10803 potentially allows an attacker to exploit the use of weak hash on the local host.
Which versions of MLflow are impacted by CVE-2026-10803?
MLflow versions up to and including 3.10.0 are impacted by CVE-2026-10803.