{"id":"CVE-2023-6014","aliases":["GHSA-4qq5-mxxx-m6gg","PYSEC-2026-415"],"url":"https://o3.security/vulnerability/CVE-2023-6014","summary":null,"details":"An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.","published":"2024-03-06T10:58:06.904Z","modified":"2026-06-29T12:26:31.782217158Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Bitnami","name":"mlflow","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-06-29T12:26:31.782217158Z"}}