PT-2026-45692 · Mlflow · Mlflow
CVE-2026-3198
·
Published
2026-06-02
·
Updated
2026-07-13
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
MLflow version 3.9.0
Description
When using basic-auth (
--app-name basic-auth), the software fails to enforce authorization checks for several Gateway API 'list' endpoints. The BEFORE REQUEST HANDLERS dictionary in mlflow/server/auth/ init .py lacks entries for the functions ListGatewaySecretInfos(), ListGatewayEndpoints(), and ListGatewayModelDefinitions(). This allows any authenticated user to enumerate all gateway secrets, endpoints, and model definitions, regardless of their permissions, potentially exposing sensitive data such as API keys and proprietary model configurations.Recommendations
For version 3.9.0, restrict access to the Gateway API 'list' endpoints or avoid using the
basic-auth configuration until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mlflow