Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2026/07/02 9:32 a.m.6 views

MLflow: trace API endpoints lack proper authorization validators

In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...

8.1CVSS7.8AI score0.00376EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder