Missing Authorization in MLflow - CVE-2026-69148
Published: November 9, 2026
Vulnerability identifier: #VU162797
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-69148
CWE-ID: CWE-862
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an authenticated remote attacker to read other users' private artifact files in MLflow deployments using built-in basic authentication and restricted experiment permissions.
The vulnerability exists due to missing READ authorization checks on source runs or logged models when creating model versions. An authenticated remote attacker with MANAGE permission on a registered model can reference a victim's artifact directory in a new version and download its files through the model version artifact endpoint.
Affected software
MLflow
How to mitigate CVE-2026-69148
Install security update from vendor's website.
MLflow - update to 3.15.0