Executive Summary

This vulnerability exists in the mlflow/mlflow project where the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled.

If job execution is enabled and any job function is allowlisted, any network client can submit, read, search, and cancel jobs without providing credentials, effectively bypassing the basic authentication.

This can lead to unauthenticated remote code execution if the allowed jobs perform privileged actions such as shell execution or filesystem changes. Even if the jobs are safe, this still represents an authentication bypass that can result in job spam, denial of service, or exposure of data in job results.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have several serious impacts:

• Unauthenticated remote code execution if allowed jobs perform privileged actions.
• Bypassing authentication, allowing any network client to submit, read, search, and cancel jobs.
• Potential job spam which could overwhelm the system.
• Denial of Service (DoS) due to abuse of job execution.
• Exposure of sensitive data in job results.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are properly protected by authentication and authorization even when the `basic-auth` app is enabled.

Disable job execution by setting `MLFLOW_SERVER_ENABLE_JOB_EXECUTION=false` if job execution is not required.

Review and restrict the allowlisted job functions to prevent any privileged actions such as shell execution or filesystem changes.

Apply any available patches or updates from the mlflow repository that address this authentication bypass.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated access to job endpoints, bypassing authentication and authorization controls. Such unauthorized access can lead to data exposure in job results and potential denial of service, which may violate data protection and security requirements mandated by standards like GDPR and HIPAA.

Specifically, the lack of proper authentication could result in unauthorized disclosure of sensitive information or manipulation of job executions, undermining confidentiality and integrity principles essential for compliance with these regulations.

Useful 0 Not Useful 0