attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
lfprojects MLflow
Classified as
CWE-346 (Origin Validation Error)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
lfprojects
MLflow
Subsystems
General OT
Sectors
Multiple
What to Know
In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. By bypassing the loopback-only restriction, the attacker can modify the Assistant's configuration to enable full access, which in turn allows the execution of arbitrary commands via the Claude Code sub-agent. This issue is resolved in version 3.10.0. (NVD)
What to Do
Monitor lfprojects's web page for any future patch releases.