CVE-2025-11200 MLflow Weak Password Requirements Authentication Bypass Vulnerability

What is CVE-2025-11200?

CVE-2025-11200 is a high-severity authentication bypass vulnerability in Lfprojects Mlflow, published on 29 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of passwords. The issue results from weak password requirements. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26916.

Weakness: CWE-521

Which versions are affected by CVE-2025-11200?

4 open source packages ship an affected version, including mlflow. It affects 1 product.

Products include Lfprojects Mlflow.

How do I fix CVE-2025-11200?

Upgrade mlflow to a fixed version for your release line: 2.21.1 or 2.22.0rc0.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-11200 being exploited?

There is no known exploitation of CVE-2025-11200 in the wild and no public exploit code.

Other vulnerabilities in Lfprojects Mlflow

• CVE-2026-64849 MLflow Server-Side Request Forgery Exploited Critical 9.3
• CVE-2025-15379 Command Injection in mlflow/mlflow Critical 10.0
• CVE-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow Critical 10.0
• CVE-2023-6977 Path Traversal: '\..\filename' Critical 10.0
• CVE-2023-6709 Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow Critical 10.0

All Lfprojects Mlflow vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as BIT-mlflow-2025-11200, GHSA-6xj8-rrqx-r4cv, PYSEC-2026-1642.