Unauthorized Account Access

🗓️ 01 Apr 2025 02:37:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 13 Views

Vulnerability in mlflow allows account creation without authentication, risking unauthorized access.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2025-1474	20 Mar 202513:03	–	circl
CNNVD	MLflow 安全漏洞	20 Mar 202500:00	–	cnnvd
CVE	CVE-2025-1474	20 Mar 202510:10	–	cve
Cvelist	CVE-2025-1474 Weak Password Requirements in mlflow/mlflow	20 Mar 202510:10	–	cvelist
Huntr	Admin Able to Create User Without Setting a Password	19 Nov 202416:56	–	huntr
EUVD	EUVD-2025-6810	3 Oct 202520:07	–	euvd
Github Security Blog	MLflow has Weak Password Requirements	20 Mar 202512:32	–	github
NVD	CVE-2025-1474	20 Mar 202510:15	–	nvd
OSV	BIT-MLFLOW-2025-1474 Weak Password Requirements in mlflow/mlflow	28 Mar 202507:22	–	osv
OSV	GHSA-4RJ2-9GCX-5QHX MLflow has Weak Password Requirements	20 Mar 202512:32	–	osv

Vulners

Node

mlflow mlflowRange2.3.0–2.18.0python

mlflow mlflowMatch0.0.1python

mlflow mlflowMatch0.1.0python

mlflow mlflowMatch0.2.0python

mlflow mlflowMatch0.2.1python

mlflow mlflowMatch0.3.0python

mlflow mlflowMatch0.4.0python

mlflow mlflowMatch0.4.1python

mlflow mlflowMatch0.4.2python

mlflow mlflowMatch0.5.0python

mlflow mlflowMatch0.5.1python

mlflow mlflowMatch0.5.2python

mlflow mlflowMatch0.6.0python

mlflow mlflowMatch0.7.0python

mlflow mlflowMatch0.8.0python

mlflow mlflowMatch0.8.1python

mlflow mlflowMatch0.8.2python

mlflow mlflowMatch0.9.0python

mlflow mlflowMatch0.9.0.1python

mlflow mlflowMatch0.9.1python

mlflow mlflowMatch1.0.0python

mlflow mlflowMatch1.1.0python

mlflow mlflowMatch1.1.1.dev0python

mlflow mlflowMatch1.10.0python

mlflow mlflowMatch1.11.0python

mlflow mlflowMatch1.12.0python

mlflow mlflowMatch1.12.1python

mlflow mlflowMatch1.13python

mlflow mlflowMatch1.13.1python

mlflow mlflowMatch1.14.0python

mlflow mlflowMatch1.14.1python

mlflow mlflowMatch1.15.0python

mlflow mlflowMatch1.16.0python

mlflow mlflowMatch1.17.0python

mlflow mlflowMatch1.18.0python

mlflow mlflowMatch1.19.0python

mlflow mlflowMatch1.2.0python

mlflow mlflowMatch1.20.0python

mlflow mlflowMatch1.20.1python

mlflow mlflowMatch1.20.2python

mlflow mlflowMatch1.21.0python

mlflow mlflowMatch1.22.0python

mlflow mlflowMatch1.23.0python

mlflow mlflowMatch1.23.1python

mlflow mlflowMatch1.24.0python

mlflow mlflowMatch1.25.0python

mlflow mlflowMatch1.25.1python

mlflow mlflowMatch1.26.0python

mlflow mlflowMatch1.26.1python

mlflow mlflowMatch1.27.0python

mlflow mlflowMatch1.28.0python

mlflow mlflowMatch1.29.0python

mlflow mlflowMatch1.3.0python

mlflow mlflowMatch1.30.0python

mlflow mlflowMatch1.30.1python

mlflow mlflowMatch1.4.0python

mlflow mlflowMatch1.5.0python

mlflow mlflowMatch1.6.0python

mlflow mlflowMatch1.7.0python

mlflow mlflowMatch1.7.1python

mlflow mlflowMatch1.7.2python

mlflow mlflowMatch1.8.0python

mlflow mlflowMatch1.9.0python

mlflow mlflowMatch1.9.1python

mlflow mlflowMatch2.0.0python

mlflow mlflowMatch2.0.0rc0python

mlflow mlflowMatch2.0.1python

mlflow mlflowMatch2.1.0python

mlflow mlflowMatch2.1.1python

mlflow mlflowMatch2.10.0python

mlflow mlflowMatch2.10.1python

mlflow mlflowMatch2.10.2python

mlflow mlflowMatch2.11.0python

mlflow mlflowMatch2.11.1python

mlflow mlflowMatch2.11.2python

mlflow mlflowMatch2.11.3python

mlflow mlflowMatch2.11.4python

mlflow mlflowMatch2.12.0python

mlflow mlflowMatch2.12.1python

mlflow mlflowMatch2.12.2python

mlflow mlflowMatch2.13.0python

mlflow mlflowMatch2.13.1python

mlflow mlflowMatch2.13.2python

mlflow mlflowMatch2.14.0python

mlflow mlflowMatch2.14.0rc0python

mlflow mlflowMatch2.14.1python

mlflow mlflowMatch2.14.2python

mlflow mlflowMatch2.14.2.dev0python

mlflow mlflowMatch2.14.3python

mlflow mlflowMatch2.15.0python

mlflow mlflowMatch2.15.0rc0python

mlflow mlflowMatch2.15.1python

mlflow mlflowMatch2.16.0python

mlflow mlflowMatch2.16.1python

mlflow mlflowMatch2.16.2python

mlflow mlflowMatch2.17.0python

mlflow mlflowMatch2.17.0rc0python

mlflow mlflowMatch2.17.1python

mlflow mlflowMatch2.17.2python

mlflow mlflowMatch2.18.0rc0python

mlflow mlflowMatch2.19.0rc0python

mlflow mlflowMatch2.2.0python

mlflow mlflowMatch2.2.1python

mlflow mlflowMatch2.2.2python

mlflow mlflowMatch2.3.0python

mlflow mlflowMatch2.3.1python

mlflow mlflowMatch2.3.2python

mlflow mlflowMatch2.4.0python

mlflow mlflowMatch2.4.1python

mlflow mlflowMatch2.4.2python

mlflow mlflowMatch2.5.0python

mlflow mlflowMatch2.6.0python

mlflow mlflowMatch2.7.0python

mlflow mlflowMatch2.7.1python

mlflow mlflowMatch2.8.0python

mlflow mlflowMatch2.8.1python

mlflow mlflowMatch2.9.0python

mlflow mlflowMatch2.9.1python

mlflow mlflowMatch2.9.2python

Source	Link
huntr	www.huntr.com/bounties/e79f7774-10fe-46b2-b522-e73b748e3b2d
github	www.github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2025-17.yaml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-1474
github	www.github.com/mlflow/mlflow/commit/149c9e18aa219bc47e86b432e130e467a36f4a17
github	www.github.com/mlflow/mlflow

13 Dec 2025 07:21Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.5

CVSS 33.8

EPSS0.00104

SSVC