Insecure Model Version Handling in MLflow by Databricks
CVE-2026-69148

7.1HIGH

Key Information:

Vendor

Mlflow

Status
Mlflow
Vendor
CVE Published:
17 August 2026

What is CVE-2026-69148?

Prior to version 3.15.0, MLflow, an open source AI engineering platform, had a vulnerability where the CreateModelVersion function allowed authenticated users to create a model version referencing another user's artifact directory. This weakness arose because _validate_source_run() and _validate_source_model() methods in mlflow/server/handlers.py only performed path containment checks. As a result, unauthorized users could access files in directories they should not have permission to by exploiting the GET /model-versions/get-artifact endpoint. This vulnerability has been addressed in version 3.15.0, which enhances permission validation.

Affected Version(s)

mlflow < 3.15.0

References

https://github.com/mlflow/mlflow/security/advisories/GHSA...
x_refsource_CONFIRM
https://github.com/mlflow/mlflow/pull/24293
x_refsource_MISC
https://github.com/mlflow/mlflow/commit/4bb7474771c3be808...
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.