#MLOps

MLflow 3.18.0 fixes a flaw that let anyone write files on servers using the FileStore backend — update now

CVE-2026-53995 let unauthenticated users write files outside the trace folder on MLflow FileStore servers. The fix shipped in 3.18.0; the 3.17.2 patch release does not include it.