Severity: Critical
CVSS Score: 9.1
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.