{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15381.json" } ], "title": "mlflow/mlflow: mlflow/mlflow: Information disclosure and unauthorized data modification via unprotected tracing and assessment endpoints", "tracking": { "current_release_date": "2026-06-30T04:09:38+00:00", "generator": { "date": "2026-06-30T04:09:38+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2025-15381", "initial_release_date": "2025-01-01T00:00:00+00:00", "revision_history": [ { "date": "2025-01-01T00:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-04-28T14:40:06+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T04:09:38+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)", "product": { "name": "Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai)", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "category": "product_version", "name": "rhoai/odh-mlflow-rhel9", "product": { "name": "rhoai/odh-mlflow-rhel9", "product_id": "rhoai/odh-mlflow-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product": { "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product_id": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-training-cuda128-torch29-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9" }, "product_reference": "rhoai/odh-mlflow-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-training-cuda128-torch29-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" }, "product_reference": "rhoai/odh-training-cuda128-torch29-py312-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-15381", "cwe": { "id": "CWE-425", "name": "Direct Request ('Forced Browsing')" }, "discovery_date": "2026-03-27T17:01:46.927467+00:00", "flags": [ { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9" ] }, { "label": "vulnerable_code_cannot_be_controlled_by_adversary", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2452341" } ], "notes": [ { "category": "description", "text": "A flaw was found in mlflow/mlflow. When the `basic-auth` application is enabled, tracing and assessment endpoints lack proper permission validation. This allows any authenticated user, even those without specific permissions on an experiment, to read sensitive trace information and create unauthorized assessments. This vulnerability leads to information disclosure by exposing trace metadata and impacts data integrity by permitting unauthorized modifications.", "title": "Vulnerability description" }, { "category": "summary", "text": "mlflow/mlflow: mlflow/mlflow: Information disclosure and unauthorized data modification via unprotected tracing and assessment endpoints", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat products do not use `basic-auth` in their default deployments and are thus not exploitable in that configuration.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_not_affected": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-15381" }, { "category": "external", "summary": "RHBZ#2452341", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452341" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-15381", "url": "https://www.cve.org/CVERecord?id=CVE-2025-15381" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15381", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15381" }, { "category": "external", "summary": "https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c", "url": "https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c" } ], "release_date": "2026-03-27T16:17:30.328000+00:00", "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-training-cuda128-torch29-py312-rhel9" ] } ], "title": "mlflow/mlflow: mlflow/mlflow: Information disclosure and unauthorized data modification via unprotected tracing and assessment endpoints" } ] }