---
id: CVE-2025-1473
aliases:
  - GHSA-969w-gqqr-g6j3
  - BIT-mlflow-2025-1473
  - PYSEC-2026-1646
title: MLflow Cross-Site Request Forgery (CSRF) vulnerability
summary: MLflow Cross-Site Request Forgery (CSRF) vulnerability
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'
vendor: mlflow
product: mlflow
ecosystem: pip
affected:
  - 'mlflow >= 2.17.0, < 2.20.3'
patched:
  - mlflow 2.20.3
published: '2025-03-20'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-969w-gqqr-g6j3'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-1473'
  - url: >-
      https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628
  - url: 'https://github.com/mlflow/mlflow'
  - url: 'https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45'
tags:
  - osv
  - pip
epss: 0.00216
epssPercentile: 0.10748
ingestedAt: '2026-07-08T18:25:47.767Z'
---

## Overview

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.

## Affected packages

- `mlflow >= 2.17.0, < 2.20.3`

## Remediation

Upgrade to a patched release:

- `mlflow 2.20.3`