CVE-2026-2734
- Source
- https://cve.org/CVERecord?id=CVE-2026-2734
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2734.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-2734
- Aliases
- Published
- 2026-05-21T03:49:38.297Z
- Modified
- 2026-07-13T16:43:34.965176091Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Authorization Bypass in SearchModelVersions in mlflow/mlflow
- Details
-
In mlflow/mlflow versions up to 3.9.0, the
SearchModelVersionsREST API endpoint and themlflowSearchModelVersionsGraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue arises due to the absence ofSearchModelVersionsin theBEFORE_REQUEST_VALIDATORSandAFTER_REQUEST_HANDLERSfor the REST API, and its omission fromGraphQLAuthorizationMiddleware.PROTECTED_FIELDSfor GraphQL. This vulnerability can expose sensitive information such as model names, version descriptions, source URIs, tags, and other metadata, potentially revealing proprietary or confidential details in multi-tenant environments. The issue is resolved in version 3.10.0. - Database specific
{ "cna_assigner": "@huntr_ai", "cwe_ids": [ "CWE-284" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2734.json" }- References
Affected packages
Git / github.com/mlflow/mlflow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mlflow/mlflow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
{ "source": [ "CPE_RANGE", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "3.10.0" } ], "cpe": "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*" }