TI-2023-05540 Aliases CVE-2023-6014 GHSA-4qq5-mxxx-m6gg

MLflow Authentication Bypass

HIGH 82CWE-598Published 2023-11-16 · Updated 2024-09-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01167 67th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed mlflow (PyPI): 2.8.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
MLflow	mlflow/mlflow	up to latest	—	No fix listed	CNA
—	mlflow (PyPI)	before 2.8.0	2.8.0	Patch available	GHSA-4qq5-mxxx-m6gg

mlflow/mlflow VendorMLflow Affected up to latest Fixed in — No fix listed CNA
mlflow (PyPI) Vendor— Affected before 2.8.0 Fixed in 2.8.0 Patch available GHSA-4qq5-mxxx-m6gg

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:lfprojects:mlflow::::::::	all versions	Vulnerable	MLflow

cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·MLflow

Remediation

Fix · GHSA-4qq5-mxxx-m6gg mlflow (PyPI) Fixed in 2.8.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-6014
2026-10-03 Alias added: GHSA-4qq5-mxxx-m6gg

References

Exploit 1

https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2023-6014

Other 5

TI-2026-46366 Server-side request forgery in mlflow KEVCVSS 3.1CRITICAL 9.3
TI-2023-03518 Absolute Path Traversal in mlflow/mlflow CVSS 3.1CRITICAL 10.0
TI-2023-01113 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
TI-2025-14028 Command Injection in mlflow/mlflow CVSS 3.1CRITICAL 10.0
TI-2023-02603 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
TI-2026-00348 Missing Authentication for Critical Function in mlflow/mlflow CVSS 3.1CRITICAL 9.8

See all 76 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences