CVE Explorer

CVE-2026-3198

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerab

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:af1ffbb6559e4c6e5f27566f4665c850ccd0b89418c4993f8b4471afec90637c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"mlflow/mlflow","vendor":"mlflow","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:8331a04c836ee5001c1a4258337159ca2f06d9cef78ef9f123660dadfb2974d4 · sha256:2ff13a7a7f6448f0… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"metric_type":"cvssV3_0"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:8331a04c836ee5001c1a4258337159ca2f06d9cef78ef9f123660dadfb2974d4 · sha256:2ff13a7a7f6448f0… · /containers/cna/metrics/0/cvssV3_0

CWE assertions

1 source assertion

{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:8331a04c836ee5001c1a4258337159ca2f06d9cef78ef9f123660dadfb2974d4 · sha256:2ff13a7a7f6448f0… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"tags":["exploit"],"url":"https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8331a04c836ee5001c1a4258337159ca2f06d9cef78ef9f123660dadfb2974d4 · sha256:2ff13a7a7f6448f0… · /containers/adp/0/references/0

{"url":"https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:8331a04c836ee5001c1a4258337159ca2f06d9cef78ef9f123660dadfb2974d4 · sha256:2ff13a7a7f6448f0… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer