1 matches found
BIT-MLFLOW-2026-8147 Authorization Bypass in mlflow/mlflow
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
8.1CVSS7.2AI score0.00376EPSS
SaveExploits1References3
20