CVE-2026-92568: MLRun through 1.11.0 Server-Side Request Forgery via Webhook
MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes when the run reaches a terminal state, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MLRunto a version that resolves this vulnerability.Fixed in 1.11.0 - Compensating control
Restrict network egress from the MLRun component handling WebhookNotification so the Kubernetes API server cannot reach internal addresses, Kubernetes APIs, or cloud metadata endpoints from within the cluster.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated MLRun user who can update a run and configure its webhook notification can exploit it. The malicious request is sent only when the affected run reaches a terminal state.
What systems could be reached through the vulnerable server?
The MLRun API server can be induced to make arbitrary HTTP requests to internal addresses. The advisory specifically identifies internal services, Kubernetes APIs, and cloud metadata endpoints reachable from within the cluster.
Are deployments affected by default?
The available information does not establish whether webhook notifications are enabled or usable by default. Exposure depends on whether authenticated users can update runs with webhook notifications and whether the API server can reach sensitive internal endpoints.
What can be done before an update is available?
Restrict which authenticated users can update runs or configure webhook notifications. Limit network access from the MLRun API server to internal services, Kubernetes APIs, and cloud metadata endpoints where feasible.