CVE-2026-8147

{"id": "CVE-2026-8147", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8147", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-02T12:28:27.236676Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@huntr.dev", "affectedData": [{"vendor": "mlflow", "product": "mlflow/mlflow", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "3.14.0", "versionType": "custom"}]}]}], "published": "2026-07-02T09:16:19.100", "references": [{"url": "https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications."}, {"lang": "es", "value": "En versiones de MLflow anteriores a la 3.14.0, cuando se ejecuta con la autenticaci\u00f3n habilitada, los puntos finales de la API de trazas carecen de validadores de autorizaci\u00f3n adecuados. Esto permite a cualquier usuario autenticado eludir los controles de autorizaci\u00f3n a nivel de experimento en todas las operaciones de traza, incluyendo la lectura, eliminaci\u00f3n y modificaci\u00f3n de trazas en experimentos a los que no tienen permiso de acceso. El problema surge del gestor \u2019_before_request\u2019, que no registra validadores de autorizaci\u00f3n para los puntos finales de traza, lo que resulta en que las solicitudes proceden sin validaci\u00f3n. Esta vulnerabilidad puede exponer datos sensibles, destruir registros de auditor\u00eda y permitir modificaciones no autorizadas."}], "lastModified": "2026-10-25T21:10:00.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD046C6D-0AF3-499E-A9D8-6BE7C0BEA278", "versionEndExcluding": "3.14.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}