CVE-2026-64849

MLflow Server-Side Request Forgery Vulnerability

Mlflow

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud…

18. Aug 2026

Ausgewertete Quellen

• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849
• CISA
  MLflow Server-Side Request Forgery Vulnerability
• NVD
  CVE-2026-64849
• GitHub
  https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j