CVE-2026-121416

SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming engine, because MethodPart::evaluate invokes resolved functions without a capability check. Authenticated users who can submit queries can run denied functions via method syntax...

EUVD-2026-115948

SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming engine, because MethodPart::evaluate invokes resolved functions without a capability check. Authenticated users who can submit queries can run denied functions via method syntax...

CVE-2026-121416: surrealdb: SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming…

SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming engine, because MethodPart::evaluate invokes resolved functions without a capability check. Authenticated users who can submit queries can run denied functions via method syntax...

CLEANSTART-2026-XI12669 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

CLEANSTART-2026-MO22180 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

BIT-MLFLOW-2026-115886 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party...

GHSA-2WQP-Q3C6-CCJ5 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

Summary MLflow's tracking server exposes POST /ajax-api/3.0/mlflow/scorer/invoke with no authentication, and the handler reflectively instantiates an attacker-named class from attacker-supplied JSON with unconstrained constructor kwargs. With the optional trulens + trulens-providers-litellm...

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

Summary MLflow's tracking server exposes POST /ajax-api/3.0/mlflow/scorer/invoke with no authentication, and the handler reflectively instantiates an attacker-named class from attacker-supplied JSON with unconstrained constructor kwargs. With the optional trulens + trulens-providers-litellm...

CVE-2026-115886 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party...

CVE-2026-115886

MLflow versions 3.12.0rc0 through 3.17.0 are vulnerable to Server-Side Request Forgery (SSRF) via unauthenticated endpoints, including POST /ajax-api/3.0/mlflow/scorer/invoke. The root cause is a vulnerable deserialization in Scorer.model_validate_json (found in mlflow/genai/scorers/base.py). Whi...

azureml-acft-image-components (>=0.0.0, <=47.0.0), azureml-contrib-run (1.62.0) +20 more potentially affected by CVE-2026-115886 via mlflow-skinny (>=3.12.0, <=3.16.1)

mlflow-skinny PYPI version =3.12.0, =0.0.0, =0.0.0, =1.62.0.post3, =0.1.4, =0.9.1, =0.6.0, =0.2.9, =3.12.0, =1.4.0, =1.7.1 - mllibprodest 1.8.13 and more Source cves: CVE-2026-115886 Source advisory: MEND:CVE-2026-115886...

CVE-2026-115886 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party...

CVE-2026-115886 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party...

CLSA-2026-1792760111 Fix CVE(s): CVE-2021-42380

SECURITY UPDATE: awk: use-after-realloc in evaluate when a $N field reference reallocates Fields while another operand still points into it - debian/patches/CVE-2021-42380.patch: Read L values before evaluating R, cap fsrealloc size, and rebase L.v when Fields moved during evaluation of R -...

PT-2026-115584

Name of the Vulnerable Software and Affected Versions SGLang versions 0.5.10 through 0.5.22 Description A code injection issue exists in the evaluate filter function. Remote attackers can execute Python code by escaping the eval sandbox using re.search globals . This is possible by sending a...

Astra Linux – Vulnerability in node-babel

Babel is a compiler for writing JavaScript. In @babel/traverse prior to versions 7.23.2 and 8.0.0-alpha.4, as well as all versions of babel-traverse, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, especially when...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: A memory leak has been fixed in ipcpciereadbioscfg. The ipcpciereadbioscfg function uses acpievaluatedsm to obtain the wwan power state configuration from the BIOS. However, it does not free the acpiobject after...

Astra Linux – vulnerability in busybox

A use-after-free in Busybox’s awk applet can lead to denial of service and potentially code execution when processing a specially crafted awk pattern within the evaluate function...

EulerOS 2.0 SP13 : busybox (EulerOS-SA-2026-4124)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying ...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2026-4306)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a craft...