Read the docs
TI-2025-10260 Aliases CVE-2025-11200GHSA-6xj8-rrqx-r4cv

MLflow Weak Password Requirements Authentication Bypass Vulnerability

Priority MEDIUM 46CWE-521Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-521.

Summary

MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from weak password requirements. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26916.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01439 73rd percentileScored 2026-11-07
Fix Fixed mlflow (PyPI): 2.22.0rc0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MLflowMLflow2.21.0—No fix listedCNA
—mlflow (PyPI)before 2.22.0rc02.22.0rc0Patch availableGHSA-6xj8-rrqx-r4cv
  • MLflow VendorMLflow Affected 2.21.0 Fixed in — No fix listed CNA
  • mlflow (PyPI) Vendor— Affected before 2.22.0rc0 Fixed in 2.22.0rc0 Patch available GHSA-6xj8-rrqx-r4cv

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*up to 2.21.0VulnerableMLflow
  • cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:* Versions up to 2.21.0 Vulnerable ·MLflow

Remediation

  • Fix · GHSA-6xj8-rrqx-r4cv mlflow (PyPI) Fixed in 2.22.0rc0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-11200
  2. 2026-10-03 Alias added: GHSA-6xj8-rrqx-r4cv

References

Patch 1

Advisory 2

Other 2

  • TI-2026-46366 Server-side request forgery in mlflow KEVCVSS 3.1CRITICAL 9.3
  • TI-2023-03518 Absolute Path Traversal in mlflow/mlflow CVSS 3.1CRITICAL 10.0
  • TI-2023-01113 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
  • TI-2025-14028 Command Injection in mlflow/mlflow CVSS 3.1CRITICAL 10.0
  • TI-2023-05540 MLflow Authentication Bypass CVSS 3.1CRITICAL 9.8
  • TI-2023-02603 Path Traversal: '\..\filename' in mlflow/mlflow CVSS 3.1CRITICAL 9.8
See all 76 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences