AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MLflowGHSA-969w-gqqr-g6j3

MLflow Cross-Site Request Forgery (CSRF) vulnerability

MLflow

CVE-2025-1473 · Published Mar 20, 2025 · updated Jul 7, 2026

Medium5.4
Fix: upgrade to 2.20.3 or later
GitHub advisory

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.

Affected versions

PackageAffectedFixed in
mlflow
PyPI
>= 2.17.0, < 2.20.32.20.3
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-352
Also known as
BIT-mlflow-2025-1473, CVE-2025-1473, PYSEC-2026-1646

More MLflow advisories

All MLflow
Medium 5.8Jun 23, 2025MLFlow SSRF via gateway_proxy_handlerCVE-2025-52967fixed in 2.22.2 +1Low 3.8Mar 20, 2025MLflow has Weak Password RequirementsCVE-2025-1474fixed in 2.19.0Medium 5.9Mar 20, 2025MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2025-0453no fix yetHigh 7.5Mar 20, 2025MLflow has a Local File Read/Path Traversal in dbfsCVE-2024-8859fixed in 2.17.0rc0Medium 5.3Mar 20, 2025MLflow Uncontrolled Resource Consumption vulnerabilityCVE-2024-6838no fix yetHigh 7.0Nov 25, 2024MLflow's excessive directory permissions allow local privilege escalationCVE-2024-27134fixed in 2.16.0