Mlflow up to 3.14.x Webhook Delivery validation.py _validate_webhook_url redirect

Summaryinfo

A vulnerability was found in Mlflow up to 3.14.x. It has been declared as problematic. This vulnerability affects the function _validate_webhook_url of the file mlflow/utils/validation.py of the component Webhook Delivery. Such manipulation leads to redirect. This vulnerability is referenced as CVE-2026-64849. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in Mlflow up to 3.14.x and classified as problematic. Affected by this issue is the function _validate_webhook_url of the file mlflow/utils/validation.py of the component Webhook Delivery. The manipulation with an unknown input leads to a redirect vulnerability. Using CWE to declare the problem leads to CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. Impacted is integrity. CVE summarizes:

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow/utils/validation.py only for the original URL while mlflow/webhooks/delivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-64849 since 07/20/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1204.001.

Upgrading to version 3.15.0 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• Mlflow

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.12
• 3.13
• 3.14

Website

• Product: https://github.com/mlflow/mlflow/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion