PT-2026-28274 · Mlflow · Mlflow

Published 2026-03-27 · Updated 2026-03-27 · CVE-2025-15381

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions mlflow/mlflow (affected versions not specified)

Description When the basic-auth application is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, even those with NO PERMISSIONS on an experiment, to read trace information and create assessments for traces they should not have access to. This impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. The issue affects deployments using mlflow server --app-name=basic-auth. The vulnerable endpoints are tracing and assessment endpoints. The NO PERMISSIONS role is a factor in the exploitation of this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-15381

GHSA-G6PG-52VF-843H

Affected Products

Mlflow

References · 6

• 🔥 https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15381 · Security Note
• https://osv.dev/vulnerability/GHSA-g6pg-52vf-843h · Vendor Advisory
• https://github.com/mlflow/mlflow · Note
• https://github.com/mlflow/mlflow/blob/b569ebc74c14af593c326143bee2df44a5d59edf/mlflow/server/auth/__init__.py#L752 · Note
• https://twitter.com/TheHackerWire/status/2037669981098512654 · Twitter Post