ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +49 more potentially affected by CVE-2026-64849 via mlflow (>=3.3.0, <=3.14.0)

mlflow PYPI version =3.3.0, =1.0.0, =0.4.0, =0.3.0, =0.1.0, =0.8.0, =0.8.0, =0.5.0.0, =0.5.0, =0.9.6, =0.9.7 and more Source cves: CVE-2026-64849 Source advisory: OSV:GHSA-7GWP-5PFP-969J...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

fastmonai (>=0.9.1, <=0.9.2), fleet-rlm (>=0.6.0, <=0.6.2) +2 more potentially affected by CVE-2026-69146 via mlflow (3.14.0)

mlflow PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - fastmonai =0.9.1, =0.6.0, =1.4.0, =1.5.0 - sm-data-ml-utils 1.0.9 Source cves: CVE-2026-69146 Source advisory: MEND:CVE-2026-69146...

EUVD-2026-60475

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69146

In MLflow versions 3.13.0–3.15.0, LogInputs is missing from BEFORE_REQUEST_HANDLERS in the auth package, letting any authenticated user inject attacker-controlled DatasetInput records into another user's run lineage via POST /api/2.0/mlflow/runs/log-inputs without UPDATE permission. Fixed in 3.15...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69148

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

EUVD-2026-60474

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148

In MLflow versions prior to 3.15.0, the CreateModelVersion handler in mlflow/server/handlers.py validates only path containment via _validate_source_run() or _validate_source_model(), omitting READ permission checks. An authenticated user can reference another user's artifact directory and read f...

a2 (>=0.1.0, <=0.3.17), abnativ (>=1.1.0, <=1.2.9) +383 more potentially affected by CVE-2026-69148 via mlflow (>=0.8.2, <=3.14.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 and more Source cves: CVE-2026-69148 Source advisory: MEND:CVE-2026-69148...

CVE-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original U...

EUVD-2026-60473

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original URL while...

CVE-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original U...

CVE-2026-64849

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original U...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +49 more potentially affected by CVE-2026-64849 via mlflow (>=3.3.0, <=3.14.0)

mlflow PYPI version =3.3.0, =1.0.0, =0.4.0, =0.3.0, =0.1.0, =0.8.0, =0.8.0, =0.5.0.0, =0.5.0, =0.9.6, =0.9.7 and more Source cves: CVE-2026-64849 Source advisory: MEND:CVE-2026-64849...

CVE-2026-64849 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/id/test endpoint calls validatewebhookurl in mlflow/utils/validation.py only for the original U...