https://vulnerability.circl.lu/sightings/feed 2026-08-22T16:45:23.992536+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8c166880-2e3c-4d24-8770-067328173dd4/export 2026-08-22T16:45:24.014325+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8c166880-2e3c-4d24-8770-067328173dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtji4yxyoj2w", "content": "\ud83d\udea8 CVE-2026-64849 is a critical unauthenticated SSRF discovered in MLflow.\n\nIt lets attackers reach internal services and potentially steal sensitive data.\n\nUpgrade to version 3.15.0 as it also fixes two additional flaws affecting MLflow, CVE-2026-69148 and CVE-2026-69146. \n\nDetails: buff.ly/Gjg9jor", "creation_timestamp": "2026-08-20T14:42:04.665188Z"} 2026-08-20T14:42:04.665188+00:00 https://vulnerability.circl.lu/sighting/1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d/export 2026-08-22T16:45:24.017573+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:01:16.186734Z"} 2026-08-18T00:01:16.186734+00:00 https://vulnerability.circl.lu/sighting/45130bc4-2293-4679-a449-f5bc37770c25/export 2026-08-22T16:45:24.017745+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "45130bc4-2293-4679-a449-f5bc37770c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fiwp2jlvglart", "content": "CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id\nCVE ID : CVE-2026-69148\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : MLflow is an open source AI engineering platform for agents, lar...", "creation_timestamp": "2026-08-17T23:47:49.993780Z"} 2026-08-17T23:47:49.993780+00:00 https://vulnerability.circl.lu/sighting/bcf805e0-f764-451a-9052-63dbb03cc816/export 2026-08-22T16:45:24.017875+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "bcf805e0-f764-451a-9052-63dbb03cc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69148", "type": "published-proof-of-concept", "source": "https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw", "content": "", "creation_timestamp": "2026-08-17T22:35:03.620770Z"} 2026-08-17T22:35:03.620770+00:00 https://vulnerability.circl.lu/sighting/ef86c73b-7972-4127-ba68-46a530abd256/export 2026-08-22T16:45:24.020517+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ef86c73b-7972-4127-ba68-46a530abd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T22:31:53.320452Z"} 2026-08-17T22:31:53.320452+00:00