{
  "advisories": [
    {
      "id": "GHSA-r5m9-wm49-959f",
      "source": "ghsa",
      "title": "MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions",
      "url": "https://github.com/advisories/GHSA-r5m9-wm49-959f"
    }
  ],
  "cve": "CVE-2026-3198",
  "enrichment": {
    "affected": [
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "generic",
              "value": "[0,latest]"
            }
          }
        ],
        "enrichment": {
          "confidence": 100.0,
          "confidence_source": "matching",
          "scores": [
            {
              "score": 100.0,
              "source": "matching"
            }
          ]
        },
        "original": {
          "product": "mlflow/mlflow",
          "source": "cna",
          "vendor": "mlflow"
        },
        "product": "mlflow/mlflow",
        "vendor": "mlflow"
      }
    ],
    "created": "2026-06-02T04:45:45.300249+00:00",
    "updated": "2026-06-08T14:00:20.629888+00:00",
    "vendors": [
      "mlflow",
      "mlflow$PRODUCT$mlflow/mlflow"
    ],
    "weaknesses": [
      "CWE-284",
      "CWE-425"
    ]
  },
  "epss": {
    "score": 0.00358
  },
  "mitre": {
    "cpes": [],
    "created": "2026-06-02T02:50:47.890000+00:00",
    "description": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {
        "score": 6.5,
        "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
      },
      "cvssV3_1": {},
      "cvssV4_0": {}
    },
    "mitre_repo_path": "cves/2026/3xxx/CVE-2026-3198.json",
    "references": [
      "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"
    ],
    "title": "Improper Access Control in mlflow/mlflow",
    "updated": "2026-06-02T13:32:42.643000+00:00",
    "vendors": [],
    "weaknesses": [
      "CWE-284"
    ]
  },
  "nvd": {
    "cpes": [
      "cpe:2.3:a:lfprojects:mlflow:3.9.0:-:*:*:*:*:*:*"
    ],
    "created": "2026-06-02T04:17:03.397000+00:00",
    "description": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {
        "score": 6.5,
        "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
      },
      "cvssV3_1": {},
      "cvssV4_0": {}
    },
    "nvd_repo_path": "2026/CVE-2026-3198.json",
    "references": [
      "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"
    ],
    "title": null,
    "updated": "2026-07-21T19:10:00.107000+00:00",
    "vendors": [
      "lfprojects",
      "lfprojects$PRODUCT$mlflow"
    ],
    "weaknesses": [
      "CWE-284"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2026-06-02T03:45:00+00:00",
        "data": [
          {
            "details": {
              "new": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.",
              "old": null
            },
            "type": "description"
          },
          {
            "details": {
              "new": "Improper Access Control in mlflow/mlflow",
              "old": null
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "CWE-284"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV3_0": {
                  "score": 6.5,
                  "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "37998f96-559d-432f-9299-d0724e65603d"
      },
      {
        "created": "2026-06-02T05:00:00+00:00",
        "data": [
          {
            "details": [
              "mlflow",
              "mlflow$PRODUCT$mlflow/mlflow"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "mlflow",
                "mlflow$PRODUCT$mlflow/mlflow"
              ],
              "removed": []
            },
            "type": "vendors"
          }
        ],
        "id": "3d24221e-317d-4667-8169-0592b2a1ec86"
      },
      {
        "created": "2026-06-02T15:30:00+00:00",
        "data": [
          {
            "details": {
              "added": {
                "ssvc": {
                  "options": {
                    "Automatable": "no",
                    "Exploitation": "poc",
                    "Technical Impact": "partial"
                  },
                  "version": "2.0.3"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "0ab315a4-8501-4aff-9976-5b02f04c20c2"
      },
      {
        "created": "2026-06-03T17:15:00+00:00",
        "data": [
          {
            "details": [
              "lfprojects",
              "lfprojects$PRODUCT$mlflow"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:a:lfprojects:mlflow:3.9.0:-:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "lfprojects",
                "lfprojects$PRODUCT$mlflow"
              ],
              "removed": []
            },
            "type": "vendors"
          }
        ],
        "id": "8bd67477-392b-4696-b59a-8c32ae79ebca"
      },
      {
        "created": "2026-06-08T12:15:00+00:00",
        "data": [
          {
            "details": {
              "added": [
                "CWE-425"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "https://nvd.nist.gov/vuln/detail/CVE-2026-3198",
                "https://www.cve.org/CVERecord?id=CVE-2026-3198"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV3_1": {
                  "score": 6.5,
                  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
              },
              "removed": {},
              "updated": {
                "threat_severity": {
                  "new": "Moderate",
                  "old": null
                }
              }
            },
            "type": "metrics"
          }
        ],
        "id": "da5dee9b-9884-4e24-9deb-161a149f870e"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:a:lfprojects:mlflow:3.9.0:-:*:*:*:*:*:*"
      ],
      "providers": [
        "nvd"
      ]
    },
    "created": {
      "data": "2026-06-02T02:50:47+00:00",
      "provider": "redhat"
    },
    "description": {
      "data": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {
          "score": 6.5,
          "vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        },
        "provider": "mitre"
      },
      "cvssV3_1": {
        "data": {
          "score": 6.5,
          "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        },
        "provider": "redhat"
      },
      "cvssV4_0": {
        "data": {},
        "provider": null
      },
      "epss": {
        "data": {
          "score": 0.00358
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {
          "options": {
            "Automatable": "no",
            "Exploitation": "poc",
            "Technical Impact": "partial"
          },
          "version": "2.0.3"
        },
        "provider": "vulnrichment"
      },
      "threat_severity": {
        "data": "Moderate",
        "provider": "redhat"
      }
    },
    "references": {
      "data": [
        "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-3198",
        "https://www.cve.org/CVERecord?id=CVE-2026-3198"
      ],
      "providers": [
        "mitre",
        "nvd",
        "redhat",
        "vulnrichment"
      ]
    },
    "title": {
      "data": "Improper Access Control in mlflow/mlflow",
      "provider": "mitre"
    },
    "updated": {
      "data": "2026-06-03T17:07:05.750000+00:00",
      "provider": "nvd"
    },
    "vendors": {
      "data": [
        "lfprojects",
        "lfprojects$PRODUCT$mlflow",
        "mlflow",
        "mlflow$PRODUCT$mlflow/mlflow"
      ],
      "providers": [
        "nvd",
        "enrichment"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-284",
        "CWE-425"
      ],
      "providers": [
        "mitre",
        "nvd",
        "redhat",
        "enrichment"
      ]
    }
  },
  "redhat": {
    "cpes": [],
    "created": "2026-06-02T02:50:47+00:00",
    "description": "A flaw was found in MLflow. When configured with basic authentication, MLflow fails to enforce proper authorization checks for several Gateway API list endpoints. This oversight allows any authenticated user, regardless of their assigned permissions, to enumerate sensitive information such as gateway secrets, endpoint configurations, and proprietary model definitions. This vulnerability leads to unauthorized information disclosure, potentially exposing critical system details and API keys.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 6.5,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
      },
      "threat_severity": "Moderate"
    },
    "redhat_repo_path": "2026/CVE-2026-3198.json",
    "references": [
      "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f",
      "https://nvd.nist.gov/vuln/detail/CVE-2026-3198",
      "https://www.cve.org/CVERecord?id=CVE-2026-3198"
    ],
    "title": "mlflow: MLflow: Information disclosure via insufficient authorization checks in Gateway API endpoints",
    "updated": "2026-06-02T02:50:47+00:00",
    "vendors": [],
    "weaknesses": [
      "CWE-425"
    ]
  },
  "vulnrichment": {
    "cpes": [],
    "created": "2026-06-02T02:50:47.890000+00:00",
    "description": "MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {},
      "cvssV4_0": {},
      "kev": {},
      "ssvc": {
        "options": {
          "Automatable": "no",
          "Exploitation": "poc",
          "Technical Impact": "partial"
        },
        "version": "2.0.3"
      }
    },
    "references": [
      "https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f"
    ],
    "title": "Improper Access Control in mlflow/mlflow",
    "updated": "2026-06-02T13:32:37.371000+00:00",
    "vendors": [],
    "vulnrichment_repo_path": "2026/3xxx/CVE-2026-3198.json",
    "weaknesses": []
  }
}