NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

NPM: MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth vulnerability discovered by ? in WordPress Npm mlflow versions 3.15.0...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +49 more potentially affected by CVE-2026-64849 via mlflow (>=3.3.0, <=3.14.0)

mlflow PYPI version =3.3.0, =1.0.0, =0.4.0, =0.3.0, =0.1.0, =0.8.0, =0.8.0, =0.5.0.0, =0.5.0, =0.9.6, =0.9.7 and more Source cves: CVE-2026-64849 Source advisory: GHSA-7GWP-5PFP-969J...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +74 more potentially affected by CVE-2026-64849 via mlflow (>=3.0.0rc2, <=3.14.0)

mlflow PYPI version =3.0.0rc2, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.17.1, =1.23.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1rc1, =0.0.1 and more Source cves: CVE-2026-64849 Source advisory: SNYK:PYTHON-MLFLOW-18912142...

GHSA-7GWP-5PFP-969J MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Summary The default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Summary The default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...

Server-side Request Forgery (SSRF)

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via a DNS rebinding attack agains...

ai-24sea (1.1.0), aiops-ml (>=1.0.0, <=1.0.1) +49 more potentially affected by CVE-2026-64849 via mlflow (>=3.3.0, <=3.14.0)

mlflow PYPI version =3.3.0, =1.0.0, =0.4.0, =0.3.0, =0.1.0, =0.8.0, =0.8.0, =0.5.0.0, =0.5.0, =0.9.6, =0.9.7 and more Source cves: CVE-2026-64849 Source advisory: OSV:GHSA-7GWP-5PFP-969J...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

fastmonai (>=0.9.1, <=0.9.2), fleet-rlm (>=0.6.0, <=0.6.2) +2 more potentially affected by CVE-2026-69146 via mlflow (3.14.0)

mlflow PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - fastmonai =0.9.1, =0.6.0, =1.4.0, =1.5.0 - sm-data-ml-utils 1.0.9 Source cves: CVE-2026-69146 Source advisory: MEND:CVE-2026-69146...

EUVD-2026-60475

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

CVE-2026-69146

In MLflow versions 3.13.0–3.15.0, LogInputs is missing from BEFORE_REQUEST_HANDLERS in the auth package, letting any authenticated user inject attacker-controlled DatasetInput records into another user's run lineage via POST /api/2.0/mlflow/runs/log-inputs without UPDATE permission. Fixed in 3.15...

CVE-2026-69146 MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.13.0 until 3.15.0, LogInputs is absent from BEFOREREQUESTHANDLERS in the mlflow/server/auth package, allowing any authenticated user to call POST /api/2.0/mlflow/runs/log-inputs...

EUVD-2026-60474

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148 MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a runid or modelid after validatesourcerun or validatesourcemodel in mlflow/server/handlers.py verifies only path containment, allowing...

CVE-2026-69148

In MLflow versions prior to 3.15.0, the CreateModelVersion handler in mlflow/server/handlers.py validates only path containment via _validate_source_run() or _validate_source_model(), omitting READ permission checks. An authenticated user can reference another user's artifact directory and read f...

a2 (>=0.1.0, <=0.3.17), abnativ (>=1.1.0, <=1.2.9) +383 more potentially affected by CVE-2026-69148 via mlflow (>=0.8.2, <=3.14.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 and more Source cves: CVE-2026-69148 Source advisory: MEND:CVE-2026-69148...