CVE-2026-69146— MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
Possible ATT&CK Techniques 1AI
T1195 · Supply Chain CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-69146
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
Source: CVE Program / CVE List V5
Vulnerability Description
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE_REQUEST_HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs for another user's run_id and inject attacker-controlled DatasetInput records into the dataset_inputs lineage metadata without UPDATE permission. This issue is fixed in version 3.15.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-69146
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-69146
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-69146 (2)
Vendor Advisories for CVE-2026-69146 (1)
Vendor Pages for CVE-2026-69146 (1)
Same Patch Batch · mlflow · 2026-08-17 · 3 CVEs total
| CVE-2026-64849 | 9.3 CRITICAL | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed |
| CVE-2026-69148 | 7.1 HIGH | MLflow: CreateModelVersion source validation does not check READ permission on referenced |
IV. Related Vulnerabilities
Same product: mlflow
- CVE-2026-69148
MLflow: CreateModelVersion source validation does not check - CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: - CVE-2026-71211
mlflow - Unvalidated Gateway Secret api_base Enables SSRF vi - CVE-2026-13484
MLflow Experiment-scoped Label Schema CRUD API authorization - CVE-2026-10803
MLflow Dataset Digest Computation digest_utils.py mlflow.dat
Same vendor: mlflow
- CVE-2026-69148
MLflow: CreateModelVersion source validation does not check - CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: - CVE-2026-71211
mlflow - Unvalidated Gateway Secret api_base Enables SSRF vi - CVE-2026-8147
Authorization Bypass in mlflow/mlflow - CVE-2026-4035
Environment Variable Resolution Vulnerability in mlflow/mlfl
Same weakness: CWE-862
- CVE-2026-75853
ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Da - CVE-2026-75850
ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handler - CVE-2026-75846
ArcadeDB before 26.8.1 Unauthorized Function Deletion via DE - CVE-2026-75836
Grav API Plugin before 1.0.14 Missing Authorization - CVE-2026-75835
Grav API Plugin before 1.0.14 Missing Authorization
V. Comments for CVE-2026-69146
No comments yet