The vulnerability in mlflow/mlflow affects all versions and involves missing authentication on FastAPI job endpoints under /ajax-api/3.0/jobs/*. When the basic-auth app is enabled and job execution is turned on (MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true), any network client can bypass authentication to interact with job functions that are allowlisted. This can result in unauthenticated remote code execution if the allowed jobs perform sensitive operations such as shell commands or filesystem modifications. Even if remote code execution is not triggered, the lack of authentication allows job spam, denial of service, and potential data exposure through job results. The vulnerability is tracked as CWE-306 (Missing Authentication for Critical Function) and has a CVSS 3.0 score of 9.1 (critical). No official patch or remediation level is currently documented. The Red Hat advisory linked does not explicitly state a fix or mitigation status.

This vulnerability allows unauthenticated attackers to fully bypass basic authentication on critical job management endpoints, enabling them to submit, read, search, and cancel jobs remotely without credentials. If the allowlisted jobs perform privileged actions, this can lead to remote code execution. Additionally, it can cause denial of service through job spam and expose sensitive data contained in job results. The impact is high confidentiality and integrity loss, with no direct availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to disable job execution (set MLFLOW_SERVER_ENABLE_JOB_EXECUTION=false) if not required, or restrict network access to the affected endpoints to trusted clients only. Review and limit allowlisted jobs to those that do not perform privileged actions. Monitor vendor advisories for updates and official patches.