REDHAT-BUG-2479797: MLflow MLflow vulnerability
In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. By bypassing the loopback-only restriction, the attacker can modify the Assistant's configuration to enable full access, which in turn allows the execution of arbitrary commands via the Claude Code sub-agent. This issue is resolved in version 3.10.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MLflowto a version that resolves this vulnerability.Fixed in 3.10.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2479797?
REHAT-BUG-2479797 has a risk score of 80, indicating a high severity level.
How do I fix REDHAT-BUG-2479797?
To fix REDHAT-BUG-2479797, you should update your MLflow installation to a patched version that addresses the improper origin validation.
What is the impact of REDHAT-BUG-2479797?
The impact of REDHAT-BUG-2479797 allows remote attackers to exploit cross-origin requests, potentially compromising the MLflow Assistant on the victim's local machine.
In which version of MLflow is REDHAT-BUG-2479797 found?
REDHAT-BUG-2479797 is found in MLflow version 3.9.0.
Can REDHAT-BUG-2479797 be exploited remotely?
Yes, REDHAT-BUG-2479797 can be exploited remotely through interactions initiated from malicious web pages.