CyberRota Analysis
AI-GeneratedAuthenticated users of MLflow versions 3.13.0 to 3.15.0 are vulnerable to unauthorized access, allowing them to inject malicious DatasetInput records into another user's run lineage metadata via the POST /api/2.0/mlflow/runs/log-inputs endpoint. This could lead to data integrity issues and potential manipulation of machine learning model inputs. Organizations using affected versions should prioritize upgrading to version 3.15.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs for another user's run_id and inject attacker-controlled DatasetInput records into the dataset_inputs lineage metadata without UPDATE permission. This issue is fixed in version 3.15.0.