[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb4EBqQAzF54L4q-SkpyJGk0wtNazffrpUB6XHSc9awU":3,"g5a-risk:CVE-2026-2652":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":58,"weaknesses":59,"weaknessesCount":42,"isActivelyExploited":68,"cisaInfo":27,"otxData":27,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":104,"notableEvents":105},"CVE-2026-2652","What is CVE-2026-2652?","A vulnerability in mlflow\u002Fmlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). The FastAPI permission middleware only enforces authentication on `\u002Fgateway\u002F` routes, leaving other routes such as the Job API (`\u002Fajax-api\u002F3.0\u002Fjobs\u002F*`) and the OpenTelemetry trace ingestion API (`\u002Fv1\u002Ftraces`) unprotected. This allows unauthenticated remote attackers to submit jobs, read job results, cancel running jobs, and inject arbitrary trace data into experiments. The issue arises from an architectural mismatch between Flask and FastAPI authentication mechanisms, where the `_find_fastapi_validator()` function fails to handle non-`\u002Fgateway\u002F` paths, resulting in a complete authentication bypass. This vulnerability is fixed in version 3.10.0.","A vulnerability in mlflow\u002Fmlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentic...","2026-05-15T03:16:23.127","2026-06-17T10:31:28.18",8.6,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":31},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"security@huntr.dev","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,4.7,[],[],0.20783,[34,34,34,34,32,32,32],0.01409,"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"lfprojects","mlflow","*","cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*",1,[44,49,56],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fgithub.com\u002Fmlflow\u002Fmlflow\u002Fcommit\u002Fbb62e773263c14e9ba4d1a82fe72d0de2442c6aa","GitHub",[48],"Patch",{"url":50,"source":51,"tags":52},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5aeff5f0-49c7-4180-b5cb-c9a046f16756","Huntr",[53,54,55],"Exploit","Mitigation","Third Party Advisory",{"url":50,"source":51,"tags":57},[53,54,55],3,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","","Draft","Base","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2026-2652? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-2652, a high severity cyber security vulnerability from 2026. A vulnerability in mlflow\u002Fmlflow versions 3.9.0 and earlier ...","CVE-2026-2652, CVE-2026-2652 vulnerability, CVE-2026-2652 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, lfprojects security, mlflow vulnerability","\u002Fwhat-is\u002Fcve-2026-2652",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-2652","Cybersecurity","CVE-2026-2652, CVE-2026-2652 vulnerability, CVE-2026-2652 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":27,"Negate":27,"Nodes":97},[98],{"Operator":99,"Negate":68,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":102,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":103,"VersionEndIncluding":27},"C8CA51FC-A1F9-4F91-B400-F7C9691394E0","3.10.0",[],[106,113,120],{"id":107,"eventType":108,"eventTime":109,"details":110,"label":111,"color":112},"5129cfdf-d70f-40a3-9c8a-8c2b3331c91f","NEW_NVD","2026-05-22T08:55:11.186564+00:00","New CVE added to NVD","Published to NVD","blue",{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"8ad7a354-3155-4a38-bd9e-00442d968d41","HIGH_EPSS_DELTA","2026-07-25T04:04:28.46151+00:00","Daily EPSS score increased by 0.174 on 2026-05-22","EPSS Score Increased","red",{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"cdf2d930-9b60-4a60-9f9e-59fb7dd5219e","LOW_EPSS_DELTA","2026-09-25T04:05:39.62133+00:00","Daily EPSS score decreased by 0.194 on 2026-05-22","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":128,"version":129},1793230569240,"2.0",{"score":131,"band":35,"action":132,"scoredAt":133},84,"Emergency patch","2026-10-28T07:15:16.778573+00:00"]