CVE-2025-15381In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators.
Updated under an hour ago ()
Does this affect you?
It affects lfprojects mlflow. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.
- CVSS
- 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- Weakness (CWE)
- CWE-200, CWE-425
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Oct 12, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
lfprojects mlflow lfprojects:mlflow | all versions | NVD |
References
- https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904cexploit, third-party-advisory
- https://access.redhat.com/security/cve/CVE-2025-15381
- https://bugzilla.redhat.com/show_bug.cgi?id=2452341
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15381.json
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.