---
id: CVE-2025-15381
title: >-
  In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled,
  tracing and assessment endpoints are not protected by permission validators
summary: >-
  In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled,
  tracing and assessment endpoints are not protected by permission validators.
  This allows any authenticated user, including those with `NO_PERMISSIONS` on
  the e…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N'
cwe:
  - CWE-200
  - CWE-425
vendor: lfprojects
product: mlflow
affected:
  - mlflow
published: '2026-03-27'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15381'
references:
  - url: 'https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c'
    label: security@huntr.dev
  - url: 'https://access.redhat.com/security/cve/CVE-2025-15381'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2452341'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15381.json
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-15381'
  - url: 'https://github.com/mlflow/mlflow'
  - url: >-
      https://github.com/mlflow/mlflow/blob/b569ebc74c14af593c326143bee2df44a5d59edf/mlflow/server/auth/__init__.py#L752
tags:
  - nvd
  - osv
  - pip
epss: 0.00344
epssPercentile: 0.2776
aliases:
  - GHSA-g6pg-52vf-843h
  - PYSEC-2026-2657
ecosystem: pip
scores:
  nvd: 7.1
  osv: 8.1
ingestedAt: '2026-07-13T18:57:58.102Z'
---

## Overview

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.

## Affected

- `mlflow`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-15381)

Affected packages:

- `mlflow <= 3.8.1`

Source: https://osv.dev/vulnerability/GHSA-g6pg-52vf-843h