What’s Vulnerable › Vulnerabilities

CVE-2026-2734: Authorization Bypass in SearchModelVersions in mlflow/mlflow

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-05-21 · updated 2026-07-23
• Weakness: CWE-284

Description

In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue arises due to the absence of `SearchModelVersions` in the `BEFORE_REQUEST_VALIDATORS` and `AFTER_REQUEST_HANDLERS` for the REST API, and its omission from `GraphQLAuthorizationMiddleware.PROTECTED_FIELDS` for GraphQL. This vulnerability can expose sensitive information such as model names, version descriptions, source URIs, tags, and other metadata, potentially revealing proprietary or confidential details in multi-tenant environments. The issue is resolved in version 3.10.0.

Affected products

• mlflow/mlflow: before 3.10.0 — fixed in 3.10.0

How to fix

Upgrade to a fixed version: mlflow/mlflow 3.10.0. Check the vendor advisory for mitigations.

References

• https://github.com/mlflow/mlflow/commit/6989066af33fdcb03588fd71a1a67f8fc5ef12c9
• https://huntr.com/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08
• https://huntr.com/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08

Get alerted when CVE-2026-2734 or the next vulnerability affects your stack