{"uuid": "ef86c73b-7972-4127-ba68-46a530abd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T22:31:53.320452Z"}