MLflow is an open source AI engineering platform for agents, large language models, and machine learning models.
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or _validate_source_model() in mlflow/server/handlers.py verifies only path containment, allowing authenticated users to create a model version that references another user's artifact directory and read files through GET /model-versions/get-artifact without the required READ permission. This issue is fixed in version 3.15.0.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Product
- AI / LLM tooling
- CVSS
- 7.1
- Fix
- available
- Exposure class
- AI infrastructure
Why it ranks 20 (Routine)
- CVSS 7.1 high
- Product class: AI infrastructure
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-69148 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.