{"data":{"id":"6bc9bcf5-c7de-4e66-8059-5bbb48503054","title":"CVE-2026-2611: In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints…","summary":"CVE-2026-2611 affects MLflow 3.9.0, where the MLflow Assistant feature has improper origin validation in its /ajax-api endpoints. A remote attacker can use cross-origin requests from a malicious webpage to reach the Assistant on a victim's local machine, bypass the loopback-only restriction, and change its configuration to enable full access, which allows arbitrary command execution via the Claude Code sub-agent.","solution":"Fixed in 3.10.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-2611","publishedAt":"2026-05-19T10:16:22.983Z","cveId":"CVE-2026-2611","cweIds":["CWE-346"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["jailbreak"],"issueType":"vulnerability","affectedPackages":["mlflow@= 3.9.0 (fixed: 3.10.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow","MLflow Assistant","Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"MLflow Assistant improper origin validation in /ajax-api endpoints","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00414,"epssCheckedAt":"2026-10-14T06:09:08.182Z","kevDateAdded":null,"advisoryAliases":["GHSA-67c5-x5mf-rppq"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:14.210Z","patchAvailable":true,"disclosureDate":"2026-05-19T10:16:22.983Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0054"]}}