CVEFinder.io

CVE-2026-2651

⛔ critical
🔍 Scan for this CVE
Summary

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/*` endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is re

Description

A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/*` endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.

CVSS Score
9.0
Critical
EPSS Score
0.4
Exploit Probability
Published Date
2026-05-25
First Seen: 2026-05-27
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 87.7% of all 338,295 vulnerabilities in our database.

#41,592
Top 25% most severe
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: May 26, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-21
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-862 CWE-1220

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
lfprojects mlflow Affected
< 3.10.1

🔗 References 5

https://github.com/mlflow/mlflow/commit/d7290811d8f3...
Patch
https://huntr.com/bounties/65beb119-d3e0-4e03-af2f-f...
Exploit Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-2651
https://bugzilla.redhat.com/show_bug.cgi?id=2481117
https://security.access.redhat.com/data/csaf/v2/vex/...

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-8147 ⚠ī¸ high 8.1 0.4 In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper author... 2026-07-02
CVE-2026-13484 đŸ”ļ medium 5.0 0.3 A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unkn... 2026-06-28
CVE-2026-10803 ℹī¸ low 3.6 0.1 A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflo... 2026-06-04
CVE-2026-4035 ⚠ī¸ high 7.7 0.4 A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gatew... 2026-06-03
CVE-2026-3198 đŸ”ļ medium 6.5 0.2 MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'l... 2026-06-02
CVE-2026-2734 đŸ”ļ medium 6.5 0.4 In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` G... 2026-05-21
These CVEs affect the same products