ZDI 2026-10-29

ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability

CVE-2026-64849 +1

Machine-generated analysis · WAYSCloud LLM

MLflow's webhook server can be abused for server-side request forgery. Exploitation requires valid authentication.

Context

The advisory concerns the MLflow webhook server component. It describes a server-side request forgery (SSRF) vulnerability that lets authenticated remote attackers initiate arbitrary server-side requests. The advisory notes that authentication is required for exploitation. The CVSS score is 6.8.

Operator considerations

Check: verify webhook endpoint URLs and restrict allowed destinations.
Log: enable logging of outbound requests generated by the webhook server.
Isolate: consider disabling the webhook feature if it is not required.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-64849.

Read the full advisory on ZDI →