{"data":{"id":"3374adbd-42f4-45f3-b65a-1d0046ed8904","title":"CVE-2026-3198: MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API…","summary":"MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) does not enforce authorization checks on the Gateway API 'list' endpoints. The `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` lacks entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. Any authenticated user can therefore enumerate gateway secrets, endpoints, and model definitions regardless of assigned permissions, exposing items such as API keys and endpoint configurations.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-3198","publishedAt":"2026-06-02T04:17:03.397Z","cveId":"CVE-2026-3198","cweIds":["CWE-284"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.11.0rc0 (fixed: 3.11.0rc0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow basic-auth flaw lets any user list Gateway secrets and endpoints","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00244,"epssCheckedAt":"2026-11-05T00:11:43.606Z","kevDateAdded":null,"advisoryAliases":["GHSA-r5m9-wm49-959f"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:57.095Z","patchAvailable":true,"disclosureDate":"2026-06-02T04:17:03.397Z","fixReleasedAt":"2026-03-16T12:14:30.683Z","daysToFix":-78,"fixCheckedAt":"2026-10-29T21:35:04.409Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.11.0rc0","matchedVersion":"3.11.0rc0","fixReleasedAt":"2026-03-16T12:14:30.683Z","daysToFix":-78,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:35:04.262Z"}]}}