MediumVulnerability
CVE-2024-4263: MLflow broken access control allows deleting artifacts with EDIT permission
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2024-4263
- Published
- Record updated
- Affected
- mlflow < 2.10.1
- Fixed in
- 2.10.1
- released February 6, 2024, 100 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2024-4263 is a broken access control flaw in mlflow/mlflow versions before 2.10.1. Users holding only EDIT permission on an experiment can delete any artifacts, because DELETE requests from EDIT users are not properly validated. A low privilege user demonstrated this by deleting a directory inside an artifact, although the official documentation says EDIT users can only read and update artifacts.
Mitigation
Fixed in 2.10.1 or later, which is the first version not affected (the source states versions before 2.10.1 are vulnerable).
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- mlflowPyPILLM dependency since 2024-05-30 · 17 tracked dependents