CVE-2026-64849

🗓️ 17 Aug 2026 21:16:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 199 Views🌐 WEB

Unauthenticated SSRF in MLflow webhooks before 3.15.0 via unvalidated redirects reaching internal services.

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for Server-Side Request Forgery in Lfprojects Mlflow	6 Sep 202600:25	–	githubexploit
GithubExploit	Exploit for CVE-2026-64849	19 Aug 202614:16	–	githubexploit
BDU FSTEC	The vulnerability of the _validate_webhook_url() function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform allows a attacker to perform an SSRF attack and gain unauthorized access to protected information.	21 Aug 202600:00	–	bdu_fstec
Circl	CVE-2026-64849	17 Aug 202622:35	–	circl
CISA KEV Catalog	MLflow Server-Side Request Forgery Vulnerability	19 Aug 202600:00	–	cisa_kev
Cvelist	CVE-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)	17 Aug 202621:16	–	cvelist
EUVD	EUVD-2026-60473	17 Aug 202621:16	–	euvd
Github Security Blog	MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)	17 Aug 202621:58	–	github
Kitploit	CVE-2026-64849	2 Sep 202600:06	–	kitploit
Kitploit	CVE-2026-64849-PoC	1 Sep 202607:35	–	kitploit

NVD

Vulners

Node

lfprojects mlflowRange<3.15.0

[
  {
    "vendor": "mlflow",
    "product": "mlflow",
    "versions": [
      {
        "version": "< 3.15.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939
github	www.github.com/mlflow/mlflow/pull/24258
github	www.github.com/mlflow/mlflow/releases/tag/v3.15.0
github	www.github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j
github	www.github.com/mlflow/mlflow/issues/24179
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
webhook_id	request body	api/2.0/mlflow/webhooks/{webhook_id}/test	Unauthenticated test endpoint that may SSRF via redirect handling to external/internal services.	CWE-918
event	request body	api/2.0/mlflow/webhooks/{webhook_id}/test	Unauthenticated test endpoint that may SSRF via redirect handling to external/internal services.	CWE-918
name	request body	api/2.0/mlflow/webhooks	Webhook registration endpoint where the URL parameter can be used as an SSRF target in conjunction with the test endpoint.	CWE-918
url	request body	api/2.0/mlflow/webhooks	Webhook registration endpoint where the URL parameter can be used as an SSRF target in conjunction with the test endpoint.	CWE-918
events	request body	api/2.0/mlflow/webhooks	Webhook registration endpoint where the URL parameter can be used as an SSRF target in conjunction with the test endpoint.	CWE-918

20 Aug 2026 19:16Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.19.3

EPSS0.1641

SSVC