CVE-2026-2652highobserved exploitationCWE-305

CVE-2026-2652: high-severity vulnerability in mlflow/mlflow

Authentication Bypass in mlflow/mlflow

Published

Follow this CVE+ Monitor mlflow/mlflow+ Monitor mlflow

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 8.6epss 21%
from disclosure to weapon
Published on NVDMay 15
VulnCheck+84d
A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). The FastAPI permission middleware only enforces authentication on `/gateway/` routes, leaving other routes such as the Job API (`/ajax-api/3.0/jobs/*`) and the OpenTelemetry trace ingestion API (`/v1/traces`) unprotected. This allows unauthenticated remote attackers to submit jobs, read job results, cancel running jobs, and inject arbitrary trace data into experiments. The issue arises from an architectural mismatch between Flask and FastAPI authentication mechanisms, where the `_find_fastapi_validator()` function fails to handle non-`/gateway/` paths, resulting in a complete authentication bypass. This vulnerability is fixed in version 3.10.0.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Affected products
mlflow · mlflow/mlflow
Related CVEs — mlflow/mlflow

In the same product, most dangerous first.

CVE-2023-6909HIGHPath Traversal: '\..\filename' in mlflow/mlflowEPSS 89.7%CVE-2023-1177CRITICALPath Traversal: '\..\filename' in mlflow/mlflowEPSS 69.7%CVE-2023-3765CRITICALAbsolute Path Traversal in mlflow/mlflowEPSS 67.3%CVE-2023-6018CRITICALMLflow Arbitrary File WriteEPSS 47.9%CVE-2024-3848HIGHPath Traversal Bypass in mlflow/mlflowEPSS 43.0%CVE-2024-2928HIGHLocal File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflowEPSS 21.8%