Lucene search
+L

3 matches found

Huntr
Huntr
added 2026/02/14 2:13 a.m.13 views

Authentication Bypass on FastAPI Routes (Job API, OTel API) When Basic Auth Enabled

Summary When MLflow is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI, the FastAPI permission middleware only enforces authentication on /gateway/ routes. All other FastAPI routes -- including the Job API /ajax-api/3.0/jobs/ and the OpenTelemetry trace...

8.6CVSS6AI score0.01502EPSS
SaveExploits1
Rows per page
Query Builder