{"data":{"id":"2df4c88f-7a86-4c20-9bf4-900326cc4271","title":"CVE-2026-2393: A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()`…","summary":"CVE-2026-2393 is a Server-Side Request Forgery (SSRF) flaw in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter without validation, and `_send_webhook_request()` in `mlflow/webhooks/delivery.py` sends HTTP POST requests to that URL. An authenticated attacker can force the MLflow backend to reach internal services, cloud metadata endpoints or external servers, potentially enabling cloud credential theft, internal network access and data exfiltration.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-2393","publishedAt":"2026-05-11T18:16:31.500Z","cveId":"CVE-2026-2393","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.9.0 (fixed: 3.9.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow server-side request forgery through webhook URL creation","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00288,"epssCheckedAt":"2026-11-08T12:09:02.260Z","kevDateAdded":null,"advisoryAliases":["GHSA-65h7-c7c4-mghx"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:38.922Z","patchAvailable":true,"disclosureDate":"2026-05-11T18:16:31.500Z","fixReleasedAt":"2026-01-29T07:56:48.811Z","daysToFix":-102,"fixCheckedAt":"2026-10-29T21:36:33.094Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"mlflow","fixedVersion":"3.9.0","matchedVersion":"3.9.0","fixReleasedAt":"2026-01-29T07:56:48.811Z","daysToFix":-102,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:32.947Z"}]}}