ZDI-CAN-31895: ZDI-26-847: MLflow AI Gateway Server-Side Request Forgery Information Disclosure Vulnerability
Published Oct 29, 2026
·Updated
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-71211.
Event History
Oct 29, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the affected MLflow installation. The available information does not specify what authenticated role or permissions are required.
2
What can a successful attacker do?
A successful attacker can cause the affected MLflow server to initiate arbitrary server-side requests. This can expose information reachable by the server, rather than only resources directly reachable by the attacker.