References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or _validate_source_model() in mlflow/server/handlers.py verifies only path containment, allowing authenticated users to create a model version that references another user's artifact directory and read files through GET /model-versions/get-artifact without the required READ permission. This issue is fixed in version 3.15.0.

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-862

https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be

https://github.com/mlflow/mlflow/pull/24293

https://github.com/mlflow/mlflow/releases/tag/v3.15.0

https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw

[{"vendor":"mlflow","product":"mlflow","versions":[{"version":"< 3.15.0","status":"affected"}]}]