CVE-2026-8147
highpriority · track · 0EPSS 0.005 · 45 %ileEUUSEPSS · scored 2026-10-23
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- GHSA-2cm6-r77w-6g96MLflow: trace API endpoints lack proper authorization validators2026-07-02ghsa · osvUS
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.
- BIT-mlflow-2026-8147Authorization Bypass in mlflow/mlflow2026-07-06vendor · osvUS
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.
- PYSEC-2026-3686MLflow: trace API endpoints lack proper authorization validators2026-08-19vendor · osvUS
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.
also known as (6)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937cnnvd
- https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5cnnvd
- https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937enisa_euvd
- https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5enisa_euvd
- https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937Patchnvd
- https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5ExploitThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan