CVE-2026-8147 | In MLflow versions prior to 3.14.0, when running with authen… | CVSS 8.1 HIGH

Description

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.

Metadata

CVE ID: CVE-2026-8147
State: PUBLISHED
Assigner: @huntr_ai
Reserved: 2026-05-08 02:45 UTC
Published: 2026-07-02 07:32 UTC
Last updated: 2026-07-02 07:32 UTC
Primary CWE: CWE-284
CWE-284 Improper Access Control
Vendor / Product: mlflow / mlflow/mlflow
Sources: cve.org · NVD

Severity & Metrics

8.1 HIGH CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products (1)

Vendor	Product	Platform	Versions
mlflow	mlflow/mlflow	—	unspecified < 3.14.0

Weakness (CWE)

CWE	Source	Description
CWE-284	cna	CWE-284 Improper Access Control

CVSS scores (1)

Score	Severity	Version	Source	Vector
8.1	HIGH	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References (2)