MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

GHSA-w5xq-c4pf-ghq7 · BIT-mlflow-2026-2734 · CVE-2026-2734 · PYSEC-2026-2660 · 갱신 2026. 7. 14.

생태계	패키지	수정 버전
PyPI	mlflow	3.10.0

In mlflow/mlflow versions up to 3.9.0, the SearchModelVersions REST API endpoint and the mlflowSearchModelVersions GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue arises due to the absence of SearchModelVersions in the BEFORE_REQUEST_VALIDATORS and AFTER_REQUEST_HANDLERS for the REST API, and its omission from GraphQLAuthorizationMiddleware.PROTECTED_FIELDS for GraphQL. This vulnerability can expose sensitive information such as model names, version descriptions, source URIs, tags, and other metadata, potentially revealing proprietary or confidential details in multi-tenant environments. The issue is resolved in version 3.10.0.

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks

영향 받는 패키지

원문

출처