CVE-2025-15381

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

State: Published
Severity: 8.1 High
Published: Mar 27, 2026
Updated: Jul 15, 2026
Reserved: Dec 30, 2025

Description

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.

Scores

CVSS	Score	Vector	Source
3.0	8.1 High	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	@huntr_ai
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	redhat-SADP

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-425 Direct Request ('Forced Browsing')

Affected Products

Product	Versions
mlflow/mlflowmlflow	latest and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.