> CVE-2026-64849 [CRITICAL]

« BACK_TO_HOME
PUBLISHED
2026-08-17 22:17
MODIFIED
2026-08-17 22:17
CVSS_SCORE V3
9.3
EPSS (Prob. Exploit)
9.84%
Top 4.5%
⚠ CISA_KEV
🎯 NUCLEI TEMPLATE
DATA SOURCES:
NVD 🔗 2026-08-17 RED HAT 🔗 2026-08-23 CISA KEV 🔗 CWE MITRE 🔗 2026-09-01 FIRST EPSS 🔗 2026-10-18 GITHUB 🔗 2026-10-29 OSV 🔗 2026-10-26 NUCLEI 🔗 2026-10-25

> DESCRIPTION

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.

> AFFECTED_PRODUCTS

Mlflow - MLflow

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
EXPLOITABILITY
3.9
IMPACT
4.7

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Network (N)
Exploit possible à distance via réseau (HTTP, API, etc.)
AC (Complexité d'Attaque)
Attack Complexity
Low (L)
Peu de conditions requises pour exploiter
PR (Privilèges Requis)
Privileges Required
None (N)
Aucune authentification requise
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Changed (C)
Impact s'étend au-delà du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
High (H)
Divulgation totale d'informations
I (Impact Intégrité)
Integrity Impact
Low (L)
Modification limitée des données possible
A (Impact Disponibilité)
Availability Impact
None (N)
Aucune interruption de service

> RÉSUMÉ DES IMPACTS

Confidentialité
High
Divulgation totale d'informations
Intégrité
Low
Modification limitée des données possible
Disponibilité
None
Aucune interruption de service

> WEAKNESSES

CWE-918

> CWE DETAILED DESCRIPTIONS

CWE-918: Server-Side Request Forgery (SSRF) - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: RHOAI 3.4.4 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Important

> GITHUB SECURITY ADVISORY

GHSA-7gwp-5pfp-969j CRITICAL

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

AFFECTED PACKAGES:
PIP / mlflow
>= 3.3.0, < 3.15.0
Fixed in: 3.15.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

AFFECTED PACKAGES:
Unknown / Unknown
ALIASES:
BIT-mlflow-2026-64849, GHSA-7gwp-5pfp-969j, PYSEC-2026-3687

> NUCLEI TEMPLATES

Des templates Nuclei sont disponibles pour scanner cette vulnérabilité.

🎯
CVE-2026-64849.yaml
http/cves/2026/CVE-2026-64849.yaml
Usage: nuclei -t http/cves/2026/CVE-2026-64849.yaml -u target.com

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/08/2026 22:17
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-918: Server-Side Request Forgery (SSRF) - The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure th...
📊 ENRICHISSEMENT 23/08/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 23/08/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 19/08/2026 17:15
KEV
Champ modifié: Catalogue KEV
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 4 Dernière mise à jour: 1 month ago

> REFERENCES

https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939
https://github.com/mlflow/mlflow/issues/24179
https://github.com/mlflow/mlflow/pull/24258
https://github.com/mlflow/mlflow/releases/tag/v3.15.0
https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j
« BACK_TO_HOME