Log in Start free

Vulnerability · Published Mar 27, 2026 · Assigned by @huntr_ai

CVE-2025-15381Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

High 8.1

In plain English

A high-severity information exposure in mlflow/mlflow from mlflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.3%top 71.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPImlflowno fix listedGHSA-g6pg-52vf-843h
PyPImlflowno fix listedPYSEC-2026-2657

Affected products (as reported)

VendorProductVersions
mlflow mlflow/mlflow unspecified – through latest

Weakness: CWE-200, CWE-425 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References