Vulnerability Report

CVE-2026-64849

CISA KEV Active

Title: CVE-2026-64849

SSRF

Proof Of Concept

PoC Available for CVE-2026-64849

CWE Category CWE-918

Published Date Aug 17, 2026

Modified Date Aug 20, 2026

Exploit Status Available

Score 9.3 CVSS v3.1

Exploit Probability (EPSS)

16.41%

Vulnerability Summary

CVE-2026-64849: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.

Impacted Vendors

lfprojects 1

Reference Links

https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939 https://github.com/mlflow/mlflow/issues/24179 https://github.com/mlflow/mlflow/pull/24258 https://github.com/mlflow/mlflow/releases/tag/v3.15.0 https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j

CVSS v3.1

Source Entity [email protected]

Severity CRITICAL

9.3

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-64849 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/codeb0ssx/CVE-2026-64849-PoC

View Code

GitHub https://github.com/BiuTrap/CVE-2026-64849

View Code

GitHub https://github.com/zavisco/CVE-2026-64849.yaml

View Code

August 20, 2026 MODIFIED