CVE-2026-8147 Details
Description
In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.
A vulnerability exists in MLflow versions prior to 3.14.0, when authentication is enabled, allowing authenticated users to bypass authorization controls on trace API endpoints. The issue arises because the trace endpoints lack proper authorization validators, leaving requests unverified. As a result, users can read, delete, and modify traces on experiments without the necessary permissions. This vulnerability can lead to the exposure of sensitive data, destruction of audit logs, and unauthorized modifications.
Users can update to MLflow version 3.14.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5 | CISA-ADP | ExploitThird Party Advisory |
| https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937 | [email protected] | Patch |
| https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5 | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-284 | Improper Access Control | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| lfprojects mlflow | < 3.14.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jul 2, 2026 | CVE Modified | CISA-ADP |
| Jul 2, 2026 | New CVE Received | [email protected] |