GitHub Advisoryadvisory · PyPI

GHSA-r5m9-wm49-959f MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MEDIUM Published 2026-06-02 Modified 2026-07-09 Official page ↗
Aliases
CVE-2026-3198
Ecosystem
PyPI
Packages
mlflow
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-284
Reviewed
2026-07-09

Affected packages

• PyPI mlflow: < 3.11.0rc0 → fixed in 3.11.0rc0

Description

MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.

Related

Alias · CVE (1)

  • CVE-2026-3198 MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References