https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 22 Aug 2026 19:37:21 +0000 https://vulnerability.circl.lu/sighting/8c166880-2e3c-4d24-8770-067328173dd4/export {"uuid": "8c166880-2e3c-4d24-8770-067328173dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtji4yxyoj2w", "content": "\ud83d\udea8 CVE-2026-64849 is a critical unauthenticated SSRF discovered in MLflow.\n\nIt lets attackers reach internal services and potentially steal sensitive data.\n\nUpgrade to version 3.15.0 as it also fixes two additional flaws affecting MLflow, CVE-2026-69148 and CVE-2026-69146. \n\nDetails: buff.ly/Gjg9jor", "creation_timestamp": "2026-08-20T14:42:04.665188Z"} {"uuid": "8c166880-2e3c-4d24-8770-067328173dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtji4yxyoj2w", "content": "\ud83d\udea8 CVE-2026-64849 is a critical unauthenticated SSRF discovered in MLflow.\n\nIt lets attackers reach internal services and potentially steal sensitive data.\n\nUpgrade to version 3.15.0 as it also fixes two additional flaws affecting MLflow, CVE-2026-69148 and CVE-2026-69146. \n\nDetails: buff.ly/Gjg9jor", "creation_timestamp": "2026-08-20T14:42:04.665188Z"} https://vulnerability.circl.lu/sighting/8c166880-2e3c-4d24-8770-067328173dd4/export Thu, 20 Aug 2026 14:42:04 +0000 https://vulnerability.circl.lu/sighting/1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d/export {"uuid": "1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:01:16.186734Z"} {"uuid": "1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:01:16.186734Z"} https://vulnerability.circl.lu/sighting/1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d/export Tue, 18 Aug 2026 00:01:16 +0000 https://vulnerability.circl.lu/sighting/45130bc4-2293-4679-a449-f5bc37770c25/export {"uuid": "45130bc4-2293-4679-a449-f5bc37770c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fiwp2jlvglart", "content": "CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id\nCVE ID : CVE-2026-69148\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : MLflow is an open source AI engineering platform for agents, lar...", "creation_timestamp": "2026-08-17T23:47:49.993780Z"} {"uuid": "45130bc4-2293-4679-a449-f5bc37770c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fiwp2jlvglart", "content": "CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id\nCVE ID : CVE-2026-69148\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : MLflow is an open source AI engineering platform for agents, lar...", "creation_timestamp": "2026-08-17T23:47:49.993780Z"} https://vulnerability.circl.lu/sighting/45130bc4-2293-4679-a449-f5bc37770c25/export Mon, 17 Aug 2026 23:47:49 +0000 https://vulnerability.circl.lu/sighting/bcf805e0-f764-451a-9052-63dbb03cc816/export {"uuid": "bcf805e0-f764-451a-9052-63dbb03cc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69148", "type": "published-proof-of-concept", "source": "https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw", "content": "", "creation_timestamp": "2026-08-17T22:35:03.620770Z"} {"uuid": "bcf805e0-f764-451a-9052-63dbb03cc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69148", "type": "published-proof-of-concept", "source": "https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw", "content": "", "creation_timestamp": "2026-08-17T22:35:03.620770Z"} https://vulnerability.circl.lu/sighting/bcf805e0-f764-451a-9052-63dbb03cc816/export Mon, 17 Aug 2026 22:35:03 +0000 https://vulnerability.circl.lu/sighting/ef86c73b-7972-4127-ba68-46a530abd256/export {"uuid": "ef86c73b-7972-4127-ba68-46a530abd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T22:31:53.320452Z"} {"uuid": "ef86c73b-7972-4127-ba68-46a530abd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T22:31:53.320452Z"} https://vulnerability.circl.lu/sighting/ef86c73b-7972-4127-ba68-46a530abd256/export Mon, 17 Aug 2026 22:31:53 +0000