ZDI-CAN-31844: ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability

Published Oct 29, 2026

Updated

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-64849.

Event History

Oct 29, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker must be authenticated to the affected MLflow installation. The issue can be exploited remotely after authentication.

What can a successful attacker do?

A successful attacker can cause the MLflow server to initiate arbitrary server-side requests. This may allow the attacker to make requests from the server's network position rather than their own.

ZDI-CAN-31844: ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What can a successful attacker do?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What can a successful attacker do?