NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...

MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

Summary When MLflow is deployed with the built-in basic-auth plugin --app-name basic-auth, any authenticated user can inject arbitrary dataset records into another user's run by calling POST /api/2.0/mlflow/runs/log-inputs. The LogInputs proto handler is absent from the BEFOREREQUESTHANDLERS map ...

CVE-2026-69146

In MLflow versions 3.13.0–3.15.0, LogInputs is missing from BEFORE_REQUEST_HANDLERS in the auth package, letting any authenticated user inject attacker-controlled DatasetInput records into another user's run lineage via POST /api/2.0/mlflow/runs/log-inputs without UPDATE permission. Fixed in 3.15...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...