Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · MLflow

CVE-2025-1473: MLflow Cross-Site Request Forgery (CSRF) vulnerability

mediumCVSS 3.1 5.4GHSA-969w-gqqr-g6j3

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.

Published Mar 20, 2025 · Updated Aug 5, 2025

Affected packages

mlflow

Ecosystem
PyPI
Affected
>= 2.17.0, < 2.20.3
Fixed in
2.20.3
Check
pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries