CVE-2026-118624 is an information disclosure vulnerability in MLflow Tracking Server Jobs caused by missing authorization checks in the _find_validator function. Exploitation requires authentication and allows remote attackers to disclose sensitive information accessible to the service account.