Vulnerability in Model Version Handler of MLflow by Databricks

CVE-2026-2614

What is CVE-2026-2614?

A significant vulnerability in the _create_model_version() handler of MLflow allows unauthenticated remote attackers to read arbitrary files on the server's filesystem. This issue arises when a CreateModelVersion request contains the tag mlflow.prompt.is_prompt, which bypasses essential source path validation. Consequently, an attacker can set a local filesystem path as the model version source, leading to unauthorized access to sensitive files. The exploitation of this flaw compromises confidentiality and poses serious security risks. All users are advised to upgrade to MLflow version 3.10.0 or later, where this vulnerability has been addressed.

References