CVE-2026-64849
Description
CVE-2026-64849 is a critical SSRF vulnerability in MLflow (CVSS 9.3) allowing unauthenticated access to internal services. Update to 3.15.0.
CPE
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| mlflow | * | 3.15.0 | vulnerable |
Related weakness (CWE)
Remediation plan
Apply official patches
Install the official security update provided by the MLflow maintainers. The fix involves improved URL validation that pins resolved addresses and prevents redirect-based bypasses.
Update affected systems
Immediately upgrade all MLflow installations running versions prior to 3.15.0 to version 3.15.0 or later to close the unauthenticated SSRF entry point.
Restrict access
Implement network-level egress filtering to prevent the MLflow server from reaching internal IP ranges or cloud metadata IP addresses (e.g., 169.254.169.254) unless explicitly required.
Monitor for exploitation
Review application logs for unusual POST requests to the /api/2.0/mlflow/webhooks/*/test endpoint, particularly those originating from external IPs and targeting internal network resources.
Detection Guidance
"Monitor web server and application logs for POST requests to /api/2.0/mlflow/webhooks/{id}/test. Specifically, look for payloads containing URLs that point to localhost, private IP ranges, or cloud metadata services (169.254.169.254). Use network security tools to detect outbound traffic from the MLflow server to unexpected internal destinations or unusual DNS resolution patterns involving redirects from external domains to internal IPs."