PT-2025-12315 · Mlflow · Mlflow

Published 2025-03-20 · Updated 2025-04-03 · CVE-2025-0453

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions mlflow/mlflow version 2.17.2

Description The /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment, tying up all the workers allocated by MLFlow and rendering the application unable to respond to other requests. This issue is due to uncontrolled resource consumption.

Recommendations For version 2.17.2, consider disabling access to the /graphql endpoint until a patch is available to prevent exploitation. Restricting the number of concurrent queries or implementing rate limiting on the /graphql endpoint can also help mitigate the risk of denial of service attacks.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-410

Related Identifiers

BIT-MLFLOW-2025-0453

CVE-2025-0453

GHSA-49M6-VRR9-2CQM

Affected Products

Mlflow

References · 9

• 🔥 https://huntr.com/bounties/788327ec-714a-4d5c-83aa-8df04dd7612b · Exploit
• https://osv.dev/vulnerability/GHSA-49m6-vrr9-2cqm · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mlflow-2025-0453 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0453 · Security Note
• https://github.com/mlflow/mlflow · Note
• https://t.me/cvetracker/19521 · Telegram Post
• https://t.me/cvedetector/20715 · Telegram Post
• https://twitter.com/CVEnew/status/1902671033968087362 · Twitter Post