REDHAT-BUG-2481117: MLflow MLflow vulnerability
A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the --serve-artifacts mode is enabled. The authorization logic does not enforce resource-level permission checks for /mlflow-artifacts/mpu/ endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MLflowto a version that resolves this vulnerability.Fixed in 3.10.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2481117?
The severity of REDHAT-BUG-2481117 is rated at 76, indicating a significant risk due to unauthorized access issues.
How do I fix REDHAT-BUG-2481117?
To fix REDHAT-BUG-2481117, upgrade to a patched version of MLflow that addresses the vulnerability and disables the `--serve-artifacts` mode if not necessary.
Which versions of MLflow are affected by REDHAT-BUG-2481117?
REDHAT-BUG-2481117 affects MLflow versions 3.10.1.dev0 and earlier.
What does REDHAT-BUG-2481117 expose users to?
REDHAT-BUG-2481117 exposes users to unauthorized access to multipart upload endpoints, potentially allowing attackers to manipulate or access sensitive artifacts.
Is authentication required for the endpoints affected by REDHAT-BUG-2481117?
No, the authorization logic for the affected endpoints in REDHAT-BUG-2481117 does not enforce resource-level permission checks.