{"data":{"id":"3ad8ba51-252f-4e90-8e81-a1458be25dab","title":"CVE-2026-2614: A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0…","summary":"CVE-2026-2614 affects the `_create_model_version()` handler in `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier. A `CreateModelVersion` request carrying the tag `mlflow.prompt.is_prompt` bypasses source path validation, so an unauthenticated remote attacker can store an arbitrary local filesystem path as a model version source. `get_model_version_artifact_handler()` then serves files from that path without checking prompt status, allowing reads of arbitrary server files with a complete loss of confidentiality.","solution":"Fixed in version 3.10.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-2614","publishedAt":"2026-05-11T20:25:41.423Z","cveId":"CVE-2026-2614","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mlflow@< 3.10.0 (fixed: 3.10.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow arbitrary file read through model version creation handler","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.03206,"epssCheckedAt":"2026-10-14T06:09:06.038Z","kevDateAdded":null,"advisoryAliases":["GHSA-42h5-h8qh-vv9v"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:37.923Z","patchAvailable":true,"disclosureDate":"2026-05-11T20:25:41.423Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}