What mlflow/mlflow shipped
Generated by FoxPlug from public activity — not affiliated with Mlflow.
Week of September 14, 2026
What shipped
- MLflow 3.16.1 patch release with bug fixes, documentation updates, and security fixes including removal of the default basic-auth admin password. Release
- Added OpenAI-compatible model discovery endpoint to the MLflow Gateway that uses gateway endpoint names as model IDs and respects gateway permissions. Pull request #25940
- Fixed security vulnerability that prevented the tracking server from accepting arbitrary artifact location URIs outside the default artifact root. Pull request #25891
- Added validation to reject conflicting protobuf field spellings in request bodies to prevent bypassing security checks. Pull request #25869
- Fixed third-party scorer module matching to use exact module names instead of package prefix matching, closing a potential security gap. Pull request #25906
- Implemented SQL trace analytics daily rollups maintenance with scheduled periodic task execution. Pull request #25489
- Backported Unity Catalog model registry Databricks Files API artifact repository support to version 2.11.4. Pull request #25986
- Backported Unity Catalog model registry Databricks Files API artifact repository support to version 2.13.3. Pull request #25987
- Fixed Unity Catalog trace location resolution in Databricks Model Serving to work without local-store validation. Pull request #25884
- Fixed pandas Series alignment in evaluation results table to use positional indexing instead of label-based indexing. Pull request #25799
Why it matters
This week shipped a stable 3.16.1 release with multiple security fixes addressing vulnerabilities in artifact handling, protobuf parsing, and module resolution. The release also continues development of advanced features like OpenAI-compatible gateway discovery, SQL trace analytics, and Unity Catalog improvements.
Changelog entry
- [Gateway] Add GET /gateway/mlflow/v1/models for OpenAI-compatible model discovery using gateway endpoint names as model IDs, respecting gateway USE permissions. Pull request #25940
- [Security] Refuse to connect to client-named artifact hosts outside the default artifact root (GHSA-mr9f-g8qf-4w4j). Pull request #25891
- [Security] Reject conflicting protobuf field spellings in request bodies (GHSA-3g8m-hm3x-gh2r). Pull request #25869
- [Security] Bind trace_ids to authorized experiment on issues/invoke and genai/evaluate/invoke. Pull request #25873
- [Traces] Maintain SQL trace analytics daily rollups with scheduled periodic task execution. Pull request #25489
- [Evaluation] Fix positional Series alignment in eval_results_table for consistent index handling. Pull request #25799
- [Model Serving] Resolve UC trace location without local-store validation in Databricks Model Serving. Pull request #25884
- [Security] Match third-party scorer modules exactly instead of by package prefix (GHSA-26p8-2jq9-3vq9). Pull request #25906
MLflow 3.16.1 is out with bug fixes, security updates, and improvements to gateway model discovery and UC trace handling.
MLflow 3.16.1 patch release now available. This release includes security fixes for artifact location validation, protobuf field conflict resolution, and scorer module matching. Also features OpenAI-compatible model discovery in the Gateway, SQL trace analytics rollups, and improved UC trace resolution in model serving.