PT-2026-41260 · Mlflow · Mlflow

CVE-2026-2652 · Published 2026-05-15 · Updated 2026-05-19

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions mlflow versions prior to 3.10.0

Description An authentication bypass occurs when the server is started with authentication enabled via --app-name basic-auth and served using uvicorn (ASGI). The FastAPI permission middleware only enforces authentication on '/gateway/' routes, leaving other endpoints unprotected. This allows unauthenticated remote attackers to submit jobs, read job results, cancel running jobs, and inject arbitrary trace data into experiments. The issue is caused by an architectural mismatch between Flask and FastAPI authentication mechanisms, specifically where the find fastapi validator() function fails to handle non-'/gateway/' paths. Affected endpoints include the Job API '/ajax-api/3.0/jobs/*' and the OpenTelemetry trace ingestion API '/v1/traces'. Over 9,700 potentially affected devices have been identified.

Recommendations Update to version 3.10.0.

Exploit

Fix

Weakness Enumeration

CWE-305

Related Identifiers

BIT-MLFLOW-2026-2652

CVE-2026-2652

GHSA-75CM-X2W3-8MGF

PYSEC-2026-2221

Affected Products

Mlflow

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2652.json · Exploit
• 🔥 https://huntr.com/bounties/5aeff5f0-49c7-4180-b5cb-c9a046f16756 · Exploit
• https://github.com/mlflow/mlflow/commit/bb62e773263c14e9ba4d1a82fe72d0de2442c6aa · Patch
• https://osv.dev/vulnerability/CVE-2026-2652 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2221 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2652 · Security Note
• https://osv.dev/vulnerability/BIT-mlflow-2026-2652 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-75cm-x2w3-8mgf · Vendor Advisory
• https://github.com/mlflow/mlflow · Note
• https://github.com/advisories/GHSA-75cm-x2w3-8mgf · Note
• https://twitter.com/fofabot/status/2056698729969635806 · Twitter Post
• https://t.me/CVEtracker/53875 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1tdyc88/critical_authentication_bypass_vulnerability · Reddit Post