CVE-2025-15381: Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow
In the latest version of mlflow/mlflow, when the basic-auth app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with NOPERMISSIONS on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using mlflow server --app-name=basic-auth are affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15381?
CVE-2025-15381 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive tracing and assessment endpoints.
How do I fix CVE-2025-15381?
To fix CVE-2025-15381, ensure that proper permission validators are implemented for the tracing and assessment endpoints in your mlflow/mlflow configuration.
Who is affected by CVE-2025-15381?
Any user of the mlflow/mlflow application with the basic-auth app enabled is potentially affected by CVE-2025-15381.
What versions of mlflow/mlflow are impacted by CVE-2025-15381?
CVE-2025-15381 affects the latest versions of mlflow/mlflow where the basic-auth app is enabled.
What can happen if CVE-2025-15381 is exploited?
Exploitation of CVE-2025-15381 can lead to unauthorized access to sensitive tracing and assessment data by any authenticated user.