漏洞概述 漏洞名称: Gateway API Authorization Bypass: Any Authenticated User Can Enumerate Secrets, Endpoints, and Model Definitions in mlflow/mlflow CVE编号: CVE-2026-2199 漏洞类型: CWE-284: Improper Access Control 严重程度: 中等 (5.5) 受影响版本: 3.9.0 修复状态: 等待修复 发现者: galaniz2580-wq 影响范围 该漏洞允许任何经过身份验证的用户枚举所有配置的AI网关密钥（API密钥、令牌）、端点配置和模型定义，从而暴露敏感的LLM提供商API密钥（如OpenAI、Anthropic等）、内部端点路由配置和专有模型定义。 修复方案 目前尚未提供具体的修复方案，状态为“等待修复”。 POC代码 验证输出 (MLflow 3.9.0) GET /api/3.0/mlflow/gateway/secrets/list as testuser: 200 OK (Expected: 403) GET /api/3.0/mlflow/gateway/endpoints/list as testuser: 200 OK (Expected: 403) GET /api/3.0/mlflow/gateway/model-definitions/list as testuser: 200 OK (Expected: 403) GET /api/2.0/mlflow/experiments/get as testuser (protected): 403 Forbidden (Correct) Same endpoints without auth: 401 Unauthorized (Authentication works, authorization missing) 发生位置 BEFORE_REQUEST_HANDLERS dictionary is missing entries for ListGatewaySecretInfos, ListGatewayEndpoints, and ListGatewayModelDefinitions