Review reviewHigh

CVE-2025-15381

mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.

CVSS: 7.1
EPSS: 0.33%
CISA KEV: Not listed
Published: 2026.03.28

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.33%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow
Affected versions: >= unspecified <= latest
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that mlflow mlflow/mlflow, Red Hat OpenShift AI (RHOAI), mlflow and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CWE: CWE-200, CWE-425