References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs for another user's run_id and inject attacker-controlled DatasetInput records into the dataset_inputs lineage metadata without UPDATE permission. This issue is fixed in version 3.15.0.

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-862

https://github.com/mlflow/mlflow/commit/5c34aec5669e2386b38b5ee0855cd61174e27693

https://github.com/mlflow/mlflow/pull/24291

https://github.com/mlflow/mlflow/releases/tag/v3.15.0

https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5

[{"vendor":"mlflow","product":"mlflow","versions":[{"version":"< 3.15.0","status":"affected"}]}]