MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-69148 · CVE overview and exploitation status

EUVD-2026-60474

GHSA-gqch-g4w5-7qcw

BIT-mlflow-2026-69148

cve-program · CVE-2026-69148

• https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw
• https://github.com/mlflow/mlflow/pull/24293
• https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be
• https://github.com/mlflow/mlflow/releases/tag/v3.15.0

euvd · EUVD-2026-60474

• https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw
• https://github.com/mlflow/mlflow/pull/24293
• https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be
• https://github.com/mlflow/mlflow/releases/tag/v3.15.0

nvd · CVE-2026-69148

• https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be
• https://github.com/mlflow/mlflow/pull/24293
• https://github.com/mlflow/mlflow/releases/tag/v3.15.0
• https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw

osv · GHSA-gqch-g4w5-7qcw

• https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw
• https://github.com/mlflow/mlflow/pull/24293
• https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be
• https://github.com/mlflow/mlflow
• https://github.com/mlflow/mlflow/releases/tag/v3.15.0

No related changes are available here.