MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

GHSA-46r5-x6jq-v8g6 · BIT-mlflow-2026-33866 · CVE-2026-33866 · PYSEC-2026-94 · 갱신 2026. 9. 10.

해야 할 일

mlflow: 3.11.0rc0 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	mlflow	3.11.0rc0

원문

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.

This issue affects MLflow version through 3.10.1

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-33866
WEBhttps://github.com/mlflow/mlflow/pull/21708
WEBhttps://github.com/mlflow/mlflow/commit/005b959cacda05d1423356cfcbd9ebeda8ff96a7
WEBhttps://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors
WEBhttps://cert.pl/en/posts/2026/04/CVE-2026-33865
PACKAGEhttps://github.com/mlflow/mlflow
WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-94.yaml

오늘 목록으로

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint (GHSA-46r5-x6jq-v8g6) · Sieve