CVE-2026-8147: lfprojects mlflow Improper Access Control

Vulnerability summary

CVE-2026-8147 is a high (CVSS 8.1) Improper Access Control vulnerability in lfprojects mlflow. EPSS estimates a 0.55% chance of exploitation in the next 30 days, higher than 44.7% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 02-07-2026
   PublishedVulnerability first disclosed.
2. 02-07-2026
   Last modifiedVulnerability information updated.

Description

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.

• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.