CVE-2026-71211
mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.
| CWE | CWE-918 |
| Vendor | mlflow |
| Product | mlflow |
| Published | Aug 5, 2026 |
| Last Updated | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for mlflow mlflow
Be the first to know when new high vulnerabilities affecting mlflow mlflow are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
mlflow / mlflow
0 ≤ 3.14.0
References
Credits
Abdivasiyev Sunnatillo