{"cve":"CVE-2025-15381","nvd":{"published":"2026-03-27T17:16:26.573","modified":"2026-10-12T22:10:00.247","status":"Modified","description":"In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","score":7.1},"cwes":["CWE-200","CWE-425"],"references":["https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c","https://access.redhat.com/security/cve/CVE-2025-15381","https://bugzilla.redhat.com/show_bug.cgi?id=2452341","https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15381.json"],"products":["lfprojects:mlflow"],"source":"nvd","synced_at":"2026-10-19T22:28:18.033120106+00:00"},"epss":{"cve":"CVE-2025-15381","score":0.00344,"percentile":0.27665,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-g6pg-52vf-843h","url":"https://osv.dev/vulnerability/GHSA-g6pg-52vf-843h","summary":"MLFlow allows Tracing + Assessments Access","modified":"2026-09-10T03:50:39.211467222Z","packages":[{"ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":["<=3.8.1"],"fixed":[]}]},{"id":"PYSEC-2026-2657","url":"https://osv.dev/vulnerability/PYSEC-2026-2657","summary":"MLFlow allows Tracing + Assessments Access","modified":"2026-07-13T16:32:38.663003334Z","packages":[{"ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":["<=3.8.1"],"fixed":[]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}