ZDI 2026-10-29

ZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability

CVE-2026-118628

Machine-generated analysis · WAYSCloud LLM

MLflow’s get-artifacts endpoint is vulnerable to unauthenticated SSRF that can disclose sensitive information.

Context

The advisory concerns MLflow, an open-source machine-learning lifecycle platform. It reports a server-side request forgery in the get-artifacts endpoint that enables information disclosure without authentication. Remote attackers can retrieve sensitive data from affected installations.

Operator considerations

Check: inventory MLflow deployments and verify whether the get-artifacts endpoint is exposed.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-118628.

Read the full advisory on ZDI →