CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
Brief
CVE ID : CVE-2026-69148
Published : Aug. 17, 2026, 10:17 p. m.
- 50 minutes ago
Description : MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.
- 0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or _validate_source_model() in mlflow/server/handlers.
py verifies only path containment, allowing authenticated users to create a model version that references another user's artifact directory and read files through GET /model-versions/get-artifact without the required READ permission. This issue is fixed in version 3.
- 0.
Severity: 7.1
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...