1527 matches found
BIT-MLFLOW-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original URL while...
PT-2026-79962
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validate webhook url in mlflow/utils/validation.py only for the original URL while...
PT-2026-79963
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFORE REQUEST HANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inpu...
The vulnerability of the _validate_webhook_url() function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform allows a attacker to perform an SSRF attack and gain unauthorized access to protected information.
The vulnerability of the validatewebhookurl function in the mlflow/utils/validation.py file of the machine learning lifecycle management platform is related to insufficient validation of server-side requests. Exploiting this vulnerability could allow an attacker to perform an SSRF attack and gain...
PT-2026-79964
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run id or model id after validate source run or validate source model in mlflow/server/handlers.py verifies only path containment, allowin...
MLflow < 3.15.0 SSRF (CVE-2026-64849)
The version of MLflow installed on the remote host is prior to 3.15.0. It is, therefore, affected by a server-side request forgery vulnerability: - The unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl only for the original URL while the webhook delivery...
CLSA-2026-1787213730 TuxCare security update for mlflow (4 CVEs)
TuxCare rebuilt mlflow to address 4 CVEs. Fixed in 2.9.1.post5+tuxcare...
CVE-2026-64849
A flaw was found in MLflow. An unauthenticated remote attacker can exploit a Server-Side Request Forgery SSRF vulnerability by sending a specially crafted request to the webhook test endpoint. This occurs because the system validates only the initial URL, but then follows unvalidated HTTP...
Exploit for CVE-2026-64849
id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthen...
CLSA-2026-1787146516 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.22.4.post7+tuxcare...
PYSEC-2026-3687 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
Summary The default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
SummaryThe default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...
MLflow: trace API endpoints lack proper authorization validators
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
PYSEC-2026-3686 MLflow: trace API endpoints lack proper authorization validators
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: openstack-glance-2026.1, openstack-horizon-2025.2, openstack-keystone-2025.2, openstack-keystone-2025.2-fips, openstack-horizon-2025.1-fips, openstack-keystone-2025.1-fips, pgadmin4-fips, openstack-placement-2025.1, openstack-placement-2025.2-fips,...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: mycli, mlflow, airflow...