CVE-2026-8147

In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.

• CWE-284

• https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937Patch
• https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5Exploit, Third Party Advisory
• https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5Exploit, Third Party Advisory

Published

Jul 2, 2026

Last Modified

Jul 6, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81447Dell OpenManage Server Administrator, versions prior to 11.1…6.8
• CVE-2026-81453Dell OpenManage Server Administrator, versions prior to 11.1…6.5
• CVE-2026-81455Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766…8.6
• CVE-2026-81467Dell ThinOS 10, versions prior to 2605_10. 2616, contains an…9.8
• CVE-2026-81468Dell ThinOS 10, versions prior to 2605_10. 2616, contains an…7.2
• CVE-2026-81469Dell Inventory Collector Client, versions prior to 15.0.0, c…7.8
• CVE-2026-81473Dell Rugged Control Center (RCC), versions prior to 5.2.206,…8.1
• CVE-2026-81474Dell OpenManage Server Administrator, versions prior to 11.1…7.8
• CVE-2026-81475Dell OpenManage Server Administrator, versions prior to 11.1…8.1
• CVE-2026-81476Dell OpenManage Server Administrator, versions prior to 11.1…8.1
• CVE-2026-81477Dell OpenManage Server Administrator, versions prior to 11.1…7.2
• CVE-2026-81478Dell OpenManage Server Administrator, versions prior to 11.1…8.1