PT-2026-42395 · Mlflow · Mlflow

Published 2026-05-21 · Updated 2026-06-05 · CVE-2026-2734

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions mlflow/mlflow versions prior to 3.10.0

Description When basic authentication is enabled, the 'SearchModelVersions' REST API endpoint and the 'mlflowSearchModelVersions' GraphQL query lack proper per-model authorization checks. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue is caused by the absence of 'SearchModelVersions' in the BEFORE REQUEST VALIDATORS and AFTER REQUEST HANDLERS for the REST API, and its omission from GraphQLAuthorizationMiddleware.PROTECTED FIELDS for GraphQL. This can expose sensitive metadata, including model names, version descriptions, source URIs, and tags, which may reveal proprietary or confidential details in multi-tenant environments.

Recommendations Update to version 3.10.0.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BIT-MLFLOW-2026-2734

CVE-2026-2734

GHSA-W5XQ-C4PF-GHQ7

Affected Products

Mlflow

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2734.json · Exploit
• 🔥 https://huntr.com/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08 · Exploit
• https://github.com/mlflow/mlflow/commit/6989066af33fdcb03588fd71a1a67f8fc5ef12c9 · Patch
• https://osv.dev/vulnerability/BIT-mlflow-2026-2734 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-2734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2734 · Security Note
• https://osv.dev/vulnerability/GHSA-w5xq-c4pf-ghq7 · Vendor Advisory
• https://github.com/mlflow/mlflow · Note
• https://twitter.com/dailycve/status/2061639099732164735 · Twitter Post
• https://twitter.com/CVEnew/status/2057407794320453785 · Twitter Post
• https://twitter.com/infoflowcloud/status/2057408771433910402 · Twitter Post
• https://t.me/cveNotify/165571 · Telegram Post
• https://t.me/cveNotify/164332 · Telegram Post
• https://t.me/CVEtracker/54457 · Telegram Post