Authorization Bypass in MLflow Affects Multiple Gateway API Endpoints
CVE-2026-3198

6.5MEDIUM

Key Information:

Vendor

Mlflow

Status
Mlflow/mlflow
Vendor
CVE Published:
2 June 2026

What is CVE-2026-3198?

MLflow 3.9.0 with basic-auth enabled fails to apply proper authorization checks across various Gateway API 'list' endpoints. Specifically, the absence of relevant entries in the BEFORE_REQUEST_HANDLERS dictionary within the mlflow/server/auth/__init__.py file permits any authenticated user, irrespective of their defined permissions, to acquire sensitive data. This includes critical details such as gateway secrets, endpoint configurations, and proprietary model definitions, thereby jeopardizing the security of the deployed environment.

Affected Version(s)

mlflow/mlflow <= unspecified

References

https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee9...

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.