NewApp Monitoring is liveSign up free
AgentbeamBeta
AI agent vulnerability · MLflow

CVE-2025-0453: MLflow Uncontrolled Resource Consumption vulnerability

mediumCVSS 3.0 5.9GHSA-49m6-vrr9-2cqm

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.

Published Mar 20, 2025 · Updated Oct 15, 2025

Affected packages

mlflow

Ecosystem
PyPI
Affected
<= 2.17.2
Fixed in
No patched version yet
Check
pip show mlflow

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MLflow vulnerabilities

All MLflow entries