AI agent vulnerability · MLflow

CVE-2025-0453: MLflow Uncontrolled Resource Consumption vulnerability

mediumCVSS 3.0 5.9GHSA-49m6-vrr9-2cqm

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.

Published Mar 20, 2025 · Updated Oct 15, 2025

Affected packages

mlflow

Ecosystem: PyPI
Affected: <= 2.17.2
Fixed in: No patched version yet
Check: pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries