MLflowGHSA-969w-gqqr-g6j3
MLflow Cross-Site Request Forgery (CSRF) vulnerability
Medium5.4CVE-2025-1473 · Published Mar 20, 2025 · updated Jul 7, 2026
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| mlflow PyPI | >= 2.17.0, < 2.20.3 | 2.20.3 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-352
- Also known as
- BIT-mlflow-2025-1473, CVE-2025-1473, PYSEC-2026-1646
More MLflow advisories
All MLflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 232025 | MLFlow SSRF via gateway_proxy_handler Medium5.8Jun 23, 2025 | Medium5.8 | 2.22.2+1 more |
| Mar 202025 | MLflow has Weak Password RequirementsLow3.8Mar 20, 2025 | Low3.8 | 2.19.0 |
| Mar 202025 | MLflow Uncontrolled Resource Consumption vulnerabilityMedium5.9Mar 20, 2025 | Medium5.9 | No fix yet |
| Mar 202025 | MLflow has a Local File Read/Path Traversal in dbfsHigh7.5Mar 20, 2025 | High7.5 | 2.17.0rc0 |
| Mar 202025 | MLflow Uncontrolled Resource Consumption vulnerabilityMedium5.3Mar 20, 2025 | Medium5.3 | No fix yet |
| Nov 252024 | MLflow's excessive directory permissions allow local privilege escalationHigh7.0Nov 25, 2024 | High7.0 | 2.16.0 |