Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/06 11:44 p.m.12 views

BIT-MLFLOW-2026-8147 Authorization Bypass in mlflow/mlflow

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...

8.1CVSS7.2AI score0.00376EPSS
SaveExploits1References3
Rows per page
Query Builder