CVE-2025-11200 is a high-severity vulnerability in MLflow versions prior to 2.22.0rc0 that allows remote attackers to bypass authentication due to weak password requirements. Exploitation does not require prior authentication. The flaw arises from insufficient password strength enforcement, enabling attackers to gain unauthorized access. A fix is available in version 2.22.0rc0.