{"data":{"id":"6ffc0a9a-08ab-42a8-8987-36ca1b90ba95","title":"CVE-2025-15381: In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not…","summary":"In the latest version of mlflow/mlflow, tracing and assessment endpoints are not protected by permission validators when the `basic-auth` app is enabled. Any authenticated user, including those with `NO_PERMISSIONS` on the experiment, can read trace information and create assessments for traces they should not access. Deployments using `mlflow server --app-name=basic-auth` are affected.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-15381","publishedAt":"2026-03-27T17:16:26.573Z","cveId":"CVE-2025-15381","cweIds":["CWE-200"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["mlflow@<= 3.8.1"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow basic-auth app lacks permission checks on tracing endpoints","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00344,"epssCheckedAt":"2026-11-09T18:09:51.972Z","kevDateAdded":null,"advisoryAliases":["GHSA-g6pg-52vf-843h"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:10.599Z","patchAvailable":null,"disclosureDate":"2026-03-27T17:16:26.573Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}