A high-severity authentication bypass vulnerability in MLflow allows authenticated users to access sensitive trace metadata and manipulate assessments without proper authorization.

This vulnerability involves an improper authorization flaw, classified as CWE-200, occurring when the basic-auth application is enabled. It allows any authenticated user, including those with no assigned permissions, to perform unauthorized read and write operations on trace and assessment endpoints.

The vulnerability poses a significant risk to data confidentiality and integrity by exposing sensitive trace information to unauthorized users. A successful exploit could lead to the leakage of proprietary model metadata or the unauthorized injection of assessments, potentially compromising the integrity of machine learning workflows. With a CVSS score of 8.1, this flaw represents a high risk to organizations relying on MLflow for sensitive data processing.

Immediate Action: Monitor vendor security channels for the release of an official patch, and restrict access to the MLflow server to trusted networks until a fix is deployed.

Proactive Monitoring: Review access logs for suspicious requests to trace and assessment endpoints, particularly from users identified as having restricted or no permissions.

Compensating Controls: Implement network-level access controls or a Web Application Firewall (WAF) to restrict traffic to the affected endpoints, ensuring only authorized personnel can communicate with the MLflow server.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the potential for unauthorized access to sensitive machine learning artifacts, this issue should be prioritized for remediation. Administrators must remain vigilant for vendor updates and apply the necessary patches as soon as they become available to restore proper access control enforcement.