CVE-2026-13484
published 2026-06-28CVE-2026-13484: A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component…
PriorityP260high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.50%
40.5th percentile
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. A reply to the GitHub issue explains, that "[t]he labeling schema PR has not been merged yet. The auth handlers will be added before the release."
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| lfprojects | mlflow | <= 2026-05-26 | — |
| lfprojects | mlflow | — | — |
| rhoai | odh-mlflow-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-pytorch-rocm-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 | — | — |
| rhoai | odh-th06-cpu-torch210-py312-rhel9 | — | — |
| rhoai | odh-th06-cuda130-torch210-py312-rhel9 | — | — |
| rhoai | odh-th06-rocm64-torch291-py312-rhel9 | — | — |
| rhoai | odh-training-cuda128-torch29-py312-rhel9 | — | — |
| rhoai | odh-workbench-codeserver-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-datascience-cpu-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-pytorch-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 | — | — |
| rhoai | odh-workbench-jupyter-trustyai-cpu-py312-rhel9 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target the Experiment-scoped Label Schema CRUD API endpoints in MLflow for missing authorization checks — unauthenticated or unauthorized remote requests to these endpoints should be flagged. ↗
- →Monitor MLflow deployments at or before commit 4666cffc7912ea606d592fc38d6a75e2935f65e7 for unauthorized CRUD operations (create, read, update, delete) against label schema resources scoped to experiments. ↗
- ·Red Hat has deferred fixes across all affected RHOAI packages; no patched container image is currently available for Red Hat OpenShift AI deployments. ↗
- ·No mitigation meeting Red Hat Product Security criteria is currently available for this issue in RHOAI environments. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.01.3LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.04.6MEDIUMAV:N/AC:H/Au:S/C:P/I:P/A:P
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7.
ghsa_unreviewed·2026-06-28
CVE-2026-13484 [LOW] CWE-862 A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7.
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. A reply to the GitHub issue explains, that "[t]he labeling schema PR has not been merged yet. The auth handlers will be added before the release."
VulDB
MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7 Experiment-scoped Label Schema CRUD API authorization (Issue 23608)
vuldb·2026-06-27
CVE-2026-13484 [LOW] MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7 Experiment-scoped Label Schema CRUD API authorization (Issue 23608)
A vulnerability categorized as problematic has been discovered in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization.
This vulnerability is referenced as CVE-2026-13484. It is possible to launch the attack remotely. Furthermore, an exploit is available.
A reply to the GitHub issue explains, that "[t]he labeling schema PR has not been merged yet. The auth handlers will be added before the release."
Red Hat
mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization
vendor_redhat·2026-06-28·CVSS 8.8
CVE-2026-13484 [HIGH] CWE-639 mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization
mlflow: MLflow: Unauthorized access and data manipulation via missing API authorization
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been disclosed to the public and may be used. A reply to the GitHub issue explains, that "[t]he labeling schema PR has not been merged yet. The auth handlers will be added before the release."
A flaw was found in MLflow. This vulnerability, located in the Experiment-scoped Label Schema CRUD API, allows a
No detection rules found.
No public exploits indexed.
https://github.com/mlflow/mlflow/https://github.com/mlflow/mlflow/issues/23608https://github.com/mlflow/mlflow/issues/23608#issuecomment-4560963877https://vuldb.com/cve/CVE-2026-13484https://vuldb.com/submit/837658https://vuldb.com/vuln/374481https://vuldb.com/vuln/374481/ctihttps://github.com/mlflow/mlflow/issues/23608#issuecomment-4560963877
2026-06-28
Published