ZeroDay Findings
Sign inSign up

Findings

CVE-2025-15381

In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.

Published Mar 27, 2026 · updated Oct 12, 2026 · lfprojects mlflow

In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using are affected.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 27, 2026 · NIST NVD

    Detected

    In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by all

  2. Oct 12, 2026 · NIST NVD

    Updated

    In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by all

Affected

  • cpe lfprojects/mlflowversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-15381

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-15381

    In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with on the experiment, to read trace information and cr

    nvd.nist.gov

References