PT-2026-42395 · Mlflow · Mlflow/Mlflow

Published 2026-05-21 · Updated 2026-05-21 · CVE-2026-2734

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In mlflow/mlflow versions up to 3.9.0, the SearchModelVersions REST API endpoint and the mlflowSearchModelVersions GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue arises due to the absence of SearchModelVersions in the BEFORE REQUEST VALIDATORS and AFTER REQUEST HANDLERS for the REST API, and its omission from GraphQLAuthorizationMiddleware.PROTECTED FIELDS for GraphQL. This vulnerability can expose sensitive information such as model names, version descriptions, source URIs, tags, and other metadata, potentially revealing proprietary or confidential details in multi-tenant environments. The issue is resolved in version 3.10.0.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-2734

Affected Products

Mlflow/Mlflow

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-2734 · Security Note
• https://huntr.com/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08 · Note
• https://github.com/mlflow/mlflow/commit/6989066af33fdcb03588fd71a1a67f8fc5ef12c9 · Note