CVE-2023-6014: MLflow authentication requirement bypass can allow a user to arbitrarily create an account
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement.
Published Nov 16, 2023 · Updated Mar 11, 2024
Affected packages
mlflow
- Ecosystem
- PyPI
- Affected
- < 2.8.0
- Fixed in
- 2.8.0
- Check
pip show mlflow
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement.
Credited to MarkLee131, yoshizawa-masatoshi.
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-6014
- https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4
- https://github.com/mlflow/mlflow/issues/9669
- https://github.com/mlflow/mlflow/pull/9700
- https://github.com/mlflow/mlflow/commit/32de2154ef9f946160e5dc01a4d8a449dd0bd259
- https://github.com/mlflow/mlflow/releases/tag/v2.8.0
- https://github.com/advisories/GHSA-4qq5-mxxx-m6gg
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More MLflow vulnerabilities
All MLflow entriesGHSA-gqvg-gmmx-x4hm
MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact
high8.8Sep 1, 2026CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
critical9.3ExploitedAug 17, 2026CVE-2026-71211
MLflow AI Gateway permits SSRF through an unvalidated api_base
high7.1No fixAug 5, 2026CVE-2026-8147
MLflow: trace API endpoints lack proper authorization validators
high8.1Jul 2, 2026CVE-2026-10803
MLflow: Deterministic sampling in dataset digest enables predictable collisions
low3.6Jun 4, 2026CVE-2026-4035
MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration
critical9.1Jun 3, 2026