High severity · published Mar 20, 2025
CVE-2025-0453
Denial of Service through Batched Queries in GraphQL in mlflow/mlflow
7.5
CVSS
11.3%
EPSS
No
On KEV
Description
In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)11.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ML
mlflow/mlflow · mlflow
through latest · source: vendor
ML
Mlflow · Lfprojects
2.17.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0453
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0453
Exploit
https://huntr.com/bounties/788327ec-714a-4d5c-83aa-8df04dd7612b
More from mlflow/mlflow
10.0
CVE-2025-15379
Command Injection in mlflow/mlflow
10.0
CVE-2025-15036
Path Traversal Vulnerability in mlflow/mlflow
9.8
CVE-2026-0545
Missing Authentication for Critical Function in mlflow/mlflow
9.6
CVE-2026-2611
Improper Origin Validation in mlflow/mlflow
9.1
CVE-2025-15031
Path Traversal Vulnerability in mlflow/mlflow