CVE-2026-3198

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f	Exploit Third Party Advisory
https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:lfprojects:mlflow:3.9.0:-:*:*:*:*:*:*

History

No history.

Information

Published : 2026-06-02 04:17

Updated : 2026-07-21 19:10

NVD link : CVE-2026-3198

Mitre link : CVE-2026-3198

CVE.ORG link : CVE-2026-3198

JSON object : View

Products Affected

lfprojects

mlflow

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-3198", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3198", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-02T13:32:18.258552Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@huntr.dev", "affectedData": [{"vendor": "mlflow", "product": "mlflow/mlflow", "versions": [{"status": "affected", "version": "unspecified", "versionType": "custom", "lessThanOrEqual": "latest"}]}]}], "published": "2026-06-02T04:17:03.397", "references": [{"url": "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users."}, {"lang": "es", "value": "MLflow 3.9.0 con autenticaci\u00f3n b\u00e1sica ('--app-name basic-auth') no aplica las comprobaciones de autorizaci\u00f3n para m\u00faltiples puntos finales list de la API de Gateway. Espec\u00edficamente, el diccionario 'BEFORE_REQUEST_HANDLERS' en 'mlflow/server/auth/__init__.py' no incluye entradas para 'ListGatewaySecretInfos', 'ListGatewayEndpoints' y 'ListGatewayModelDefinitions'. Esto permite a cualquier usuario autenticado, independientemente de sus permisos asignados, enumerar todos los secretos, puntos finales y definiciones de modelos de la pasarela. Esta vulnerabilidad expone informaci\u00f3n sensible, como claves de API, configuraciones de puntos finales y definiciones de modelos propietarios, a usuarios no autorizados."}], "lastModified": "2026-07-21T19:10:00.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lfprojects:mlflow:3.9.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "454B4D36-BE89-42E7-A901-19B4DD7F4AC5"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}