REDHAT-BUG-2454889: High severity MLflow MLflow vulnerability
In mlflow/mlflow, the FastAPI job endpoints under /ajax-api/3.0/jobs/ are not protected by authentication or authorization when the basic-auth app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled (MLFLOWSERVERENABLEJOBEXECUTION=true) and any job function is allowlisted, any network client can submit, read, search, and cancel jobs without credentials, bypassing basic-auth entirely. This can lead to unauthenticated remote code execution if allowed jobs perform privileged actions such as shell execution or filesystem changes. Even if jobs are deemed safe, this still constitutes an authentication bypass, potentially resulting in job spam, denial of service (DoS), or data exposure in job results.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set MLFLOW_SERVER_ENABLE_JOB_EXECUTION=false to disable job execution, preventing unauthenticated clients from submitting/reading/searching/canceling allowlisted jobs without credentials.
MLflow server MLFLOW_SERVER_ENABLE_JOB_EXECUTION = false - Configuration
Ensure authentication/authorization protects the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` so that job submission/read/search/cancel cannot occur without credentials even when the basic-auth app is enabled.
MLflow server (FastAPI basic-auth app) basic-auth protection for FastAPI job endpoints = enabled
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2454889?
The severity of REDHAT-BUG-2454889 is high, rated at 7.
How do I fix REDHAT-BUG-2454889?
To fix REDHAT-BUG-2454889, ensure that authentication and authorization are properly configured for FastAPI job endpoints under `/ajax-api/3.0/jobs/*` when using the `basic-auth` app.
What impact does REDHAT-BUG-2454889 have on users?
REDHAT-BUG-2454889 allows unauthenticated access to job execution endpoints, potentially leading to unauthorized job submission.
Is REDHAT-BUG-2454889 present in all versions of MLflow?
REDHAT-BUG-2454889 affects the latest version of the MLflow repository.
What should I do if job execution is enabled in MLflow due to REDHAT-BUG-2454889?
If job execution is enabled, immediately implement authentication and authorization measures to protect the affected FastAPI endpoints.