{"data":{"id":"70c0ca8e-6181-4b8b-8544-718a07ac1c70","title":"CVE-2026-2734: In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions`…","summary":"In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack per-model authorization checks when basic authentication is enabled. Any authenticated user can enumerate model versions across all registered models regardless of permission level, exposing metadata such as model names, version descriptions, source URIs and tags. The issue is resolved in version 3.10.0.","solution":"Fixed in 3.10.0.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-2734","publishedAt":"2026-05-21T05:16:22.723Z","cveId":"CVE-2026-2734","cweIds":["CWE-284"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.10.0 (fixed: 3.10.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"mlflow SearchModelVersions lacks per-model authorization checks","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00441,"epssCheckedAt":"2026-11-07T06:14:03.168Z","kevDateAdded":null,"advisoryAliases":["GHSA-w5xq-c4pf-ghq7"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:09.621Z","patchAvailable":true,"disclosureDate":"2026-05-21T05:16:22.723Z","fixReleasedAt":"2026-02-20T13:48:08.038Z","daysToFix":-90,"fixCheckedAt":"2026-10-29T21:35:36.110Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.10.0","matchedVersion":"3.10.0","fixReleasedAt":"2026-02-20T13:48:08.038Z","daysToFix":-90,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:35:35.965Z"}]}}