CVE-2026-33866
mediumPriorität · verfolgen · 17OT-Risiko · erhöhtEPSS 0.004 · 30. PerzentilEUUSEPSS · bewertet 2026-10-27
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.3–5.3
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (4)
Betroffene Produkte und Versionsbereiche.
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-46r5-x6jq-v8g6MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint2026-04-07ghsa · osvUS
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
- BIT-mlflow-2026-33866Authorization Bypass in MLflow AJAX Endpoint2026-04-21vendor · osvUS
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
- PYSEC-2026-942026-04-07vendor · osvUS
MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access. This issue affects MLflow version through 3.10.1
auch bekannt als (7)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert.pl/en/posts/2026/04/CVE-2026-33865/cnnvd
- https://github.com/mlflow/mlflow/pull/21708cnnvd
- https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectorsenisa_euvd
- https://cert.pl/en/posts/2026/04/CVE-2026-33865/enisa_euvd
- https://github.com/mlflow/mlflow/pull/21708enisa_euvd
- https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectorsExploitThird Party Advisorynvd
- https://cert.pl/en/posts/2026/04/CVE-2026-33865/Third Party Advisorynvd
- https://github.com/mlflow/mlflow/pull/21708Issue TrackingPatchnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan