CVE-2025-15381 - CVE House
Back to Database
Status published High CVE-2025-15381

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

Vulnerability Description

In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-15381

Credits & Attribution

No credits recorded in the NVD database.

References

More from mlflow

View All →
CVE-2025-1474
Weak Password Requirements in mlflow/mlflow
Low 3.8
CVE-2025-1473
CSRF in mlflow/mlflow
Medium 5.4
CVE-2025-15379
Command Injection in mlflow/mlflow
Critical 10
CVE-2025-15036
Path Traversal Vulnerability in mlflow/mlflow
Critical 9.6
CVE-2025-15031
Path Traversal Vulnerability in mlflow/mlflow
High 8.1

Affected Vendor

Affected Software

mlflow/mlflow
Vulnerable Versions:
unspecified

Timeline

Official Publish: March 27th, 2026
Last Modified: July 15th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration