CVE-2026-71211: mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint
MLflow's AI Gateway accepts an authconfig.apibase value when creating a gateway secret (mlflow/server/handlers.py, creategatewaysecret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gatewayapi.py, rawproxy) subsequently issues an HTTP request to that stored apibase plus a caller-supplied path and returns the full response body.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71211?
The severity of CVE-2026-71211 is rated high with a score of 7.7.
How do I fix CVE-2026-71211?
To fix CVE-2026-71211, ensure proper validation of the api_base input to prevent unrestricted access and potential SSRF attacks.
What type of vulnerability is CVE-2026-71211?
CVE-2026-71211 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
What software is affected by CVE-2026-71211?
CVE-2026-71211 affects the MLflow software, specifically versions without proper validations in the AI Gateway.
What is the impact of exploiting CVE-2026-71211?
Exploiting CVE-2026-71211 could allow an attacker to access internal services via the unvalidated gateway proxy.