ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability

Published Oct 29, 2026

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-71211.

Event History

Oct 29, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A remote attacker who can authenticate to an affected MLflow installation can exploit it. The provided information does not identify any additional privilege or network-access requirements.

What can an attacker do by exploiting it?

An authenticated attacker can cause the MLflow server to initiate arbitrary server-side requests, which can lead to information disclosure. The provided information does not specify which internal services or data sources may be reachable.

ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What can an attacker do by exploiting it?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What can an attacker do by exploiting it?