Authentication Bypass Vulnerability in MLflow by Databricks

CVE-2025-11200

What is CVE-2025-11200?

This vulnerability in MLflow arises from inadequate password requirements, enabling attackers to bypass authentication entirely. By exploiting this flaw, remote adversaries can access sensitive functions without proper authentication, posing a significant risk to the data integrity and security of the affected systems. It is crucial for users of MLflow to assess their installations and implement stronger password policies to mitigate this vulnerability.

References