CVE-2026-2393
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.
Published May 11, 2026 · updated Jun 17, 2026 · lfprojects mlflow
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The function in accepts a user-controlled parameter without validation, and the function in sends HTTP POST requests to this attacker-controlled URL. This allows an authenticated attacker to force the MLflow backend to send HTTP requests to internal services, cloud metadata endpoints, or arbitrary external servers. The lack of input sanitization, URL scheme filtering, or allowlist validation on the webhook URL enables exploitation, potentially leading to cloud credential theft, internal network access, and data exfiltration.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 11, 2026 · NIST NVD
Detected
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The function in accepts a user-controlled parameter without validation, and the function in sends HTTP POST requests to this attacker-controlled URL. This allows an authenticated attacker to force the MLflow backend to send HTTP requests to internal services, cloud metadata endpoints, or arbitrary external
Jun 17, 2026 · NIST NVD
Updated
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The function in accepts a user-controlled parameter without validation, and the function in sends HTTP POST requests to this attacker-controlled URL. This allows an authenticated attacker to force the MLflow backend to send HTTP requests to internal services, cloud metadata endpoints, or arbitrary external
Affected
- cpe lfprojects/mlflowversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-2393
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-2393
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The function in accepts a user-controlled parameter without validation, and the function in `mlflow/webhook
nvd.nist.gov