MediumVulnerability
CVE-2026-2734: mlflow SearchModelVersions lacks per-model authorization checks
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-2734
- Published
- Record updated
- Affected
- mlflow < 3.10.0
- Fixed in
- 3.10.0
- released February 20, 2026, 90 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack per-model authorization checks when basic authentication is enabled. Any authenticated user can enumerate model versions across all registered models regardless of permission level, exposing metadata such as model names, version descriptions, source URIs and tags. The issue is resolved in version 3.10.0.
Mitigation
Fixed in 3.10.0.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- mlflowPyPILLM dependency since 2024-05-30 · 17 tracked dependents