Severity: Critical
CVSS Score: 10
An attacker can overwrite any file on the server hosting MLflow without any authentication.