CVE-2026-3198: Improper Access Control in mlflow/mlflow
MLflow 3.9.0 with basic-auth (--app-name basic-auth) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the BEFOREREQUESTHANDLERS dictionary in mlflow/server/auth/init.py does not include entries for ListGatewaySecretInfos, ListGatewayEndpoints, and ListGatewayModelDefinitions. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3198?
CVE-2026-3198 has a medium severity score of 6.5.
How do I fix CVE-2026-3198?
To fix CVE-2026-3198, ensure proper authorization checks are implemented for the affected 'list' endpoints in MLflow.
What types of access control issues are involved in CVE-2026-3198?
CVE-2026-3198 involves improper access control due to missing authorization checks in multiple Gateway API endpoints.
Which MLflow version is affected by CVE-2026-3198?
MLflow version 3.9.0 is affected by CVE-2026-3198.
What software does CVE-2026-3198 impact?
CVE-2026-3198 impacts the mlflow package available on PyPI.