Threats tagged 'bit-mlflow-2026-115886'

MLflow versions from 3.12.0 up to but not including 3.17.0 contain a server-side request forgery (SSRF) vulnerability in the scorer invoke, register, and GenAI evaluate endpoints. This vulnerability allows unauthenticated attackers to send crafted requests that cause the server to make outbound HTTP requests to attacker-controlled or internal hosts. The issue arises from insecure deserialization of third-party scorer data that is resolved using a module-path allowlist but does not restrict constructor arguments. The vulnerability is fixed in version 3.17.0.