Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-0453 BIT-mlflow-2025-0453EUVD-2025-6836GHSA-49m6-vrr9-2cqmPYSEC-2026-1637

Denial of Service through Batched Queries in GraphQL in mlflow/mlflow

Published Mar 20, 2025 · Updated Oct 15, 2025 · Assigned by @huntr_ai

Description

In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.

Affected products

VendorProductAffectedFixed
mlflow mlflow/mlflow unspecified – ≤ latest —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mlflow <= 2.17.2 — GHSA-49m6-vrr9-2cqm

References