CVE-2026-8147: MLflow trace API missing authorization checks allowing unauthorized access

Summary

CVE-2026-8147 affects MLflow versions prior to 3.14.0 when authentication is enabled. The trace API endpoints lack proper authorization validators because the `_before_request` handler does not register them, so any authenticated user can bypass experiment-level access controls to read, delete, or modify traces on experiments they cannot access. The flaw can expose sensitive data, destroy audit logs, and enable unauthorized changes.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• mlflowPyPILLM dependency since 2024-05-30 · 17 tracked dependents