Vulnerability · Published Aug 17, 2026 · Assigned by GitHub_M

CVE-2026-69146MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

Medium 6.5

In plain English

A medium-severity missing authorization in mlflow from mlflow. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 66.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs for another user's run_id and inject attacker-controlled DatasetInput records into the dataset_inputs lineage metadata without UPDATE permission. This issue is fixed in version 3.15.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	mlflow	3.15.0	GHSA-3p64-6gvh-82v5

Affected products (as reported)

Vendor	Product	Versions
mlflow	mlflow	< 3.15.0

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5 x_refsource_CONFIRM
https://github.com/mlflow/mlflow/pull/24291 x_refsource_MISC
https://github.com/mlflow/mlflow/commit/5c34aec5669e2386b38b5ee0855cd61174e27693 x_refsource_MISC
https://github.com/mlflow/mlflow/releases/tag/v3.15.0 x_refsource_MISC