Lucene search
+L

35 matches found

PyPA
PyPA
added 2026/08/19 11:56 a.m.19 views

MLflow: trace API endpoints lack proper authorization validators

In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...

8.1CVSS7.8AI score0.00548EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder