MLflow versions prior to 3.11.0 are vulnerable to an authentication bypass vulnerability that allows attackers to access protected resources without proper authentication. This vulnerability arises from a flaw in the authentication mechanism, which can be exploited by attackers to gain unauthorized access to sensitive data and functionalities within the MLflow platform. This detection is included in the AI and LLM category.

之前的 3.11.0 MLflow 版本容易受到繞過身份驗證弱點的影響，該弱點允許攻擊者在沒有適當身份驗證的情況下存取受保護的資源。此漏洞源於身份驗證機制中的缺陷，攻擊者可以利用該缺陷未經授權存取 MLflow 平台內的敏感資料和功能。此偵測包含在 AI 和 LLM 類別中。

3.11.0より前のMLflowバージョンは、認証バイパスの脆弱性の影響を受けやすく、攻撃者が適切な認証なしに保護されたリソースにアクセスする可能性があります。この脆弱性は認証メカニズムの欠陥から生じ、攻撃者がこれを悪用して、MLflowプラットフォーム内の機密データや機能に不正にアクセスする可能性があります。この検出は、AI および LLM カテゴリに含まれます。

之前 3.11.0 的 MLflow 版本容易受到身份验证绕过漏洞的影响，允许攻击者在未经过正确身份验证的情况下访问受保护的资源。此漏洞源于身份验证机制中的缺陷，攻击者可利用该缺陷获取对 MLflow 平台内敏感数据和功能的未经授权的访问权限。此检测包含在“AI 和 LLM”类别中。

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain
    FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served
    via uvicorn (ASGI). The FastAPI permission middleware only enforces authentication on `/gateway/` routes,
    leaving other routes such as the Job API (`/ajax-api/3.0/jobs/*`) and the OpenTelemetry trace ingestion
    API (`/v1/traces`) unprotected. This allows unauthenticated remote attackers to submit jobs, read job
    results, cancel running jobs, and inject arbitrary trace data into experiments. The issue arises from an
    architectural mismatch between Flask and FastAPI authentication mechanisms, where the
    `_find_fastapi_validator()` function fails to handle non-`/gateway/` paths, resulting in a complete
    authentication bypass. This vulnerability is fixed in version 3.10.0. (CVE-2026-2652)

ID	Name	Product	Family	Published	Updated	Severity
115253	MLflow < 3.11.0 Authentication Bypass	Web App Scanning	Artificial Intelligence	5/28/2026	5/28/2026	high
115253	MLflow < 3.11.0 驗證繞過	Web App Scanning	Artificial Intelligence	5/28/2026	5/28/2026	high
115253	MLflow < 3.11.0 認証バイパス	Web App Scanning	Artificial Intelligence	5/28/2026	5/28/2026	high
115253	MLflow < 3.11.0 身份验证绕过	Web App Scanning	Artificial Intelligence	5/28/2026	5/28/2026	high
442308	SCA: security update for mlflow (GHSA-75cm-x2w3-8mgf)	Tenable Cloud Security	SCA Checks	5/22/2026	7/2/2026	high
442308	SCA: security update for mlflow (GHSA-75cm-x2w3-8mgf)	Tenable Self-Hosted Container Security	SCA Checks	5/22/2026	7/2/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high