MLflow AI Gateway SSRF can leak data if authenticated (CVE-2026-71211)
ZDI rates the authenticated flaw 7.7; the snippet does not name versions or a patch.
44
Product
MLflow AI Gateway
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 29, 2026
- Last mentioned4d ago
Timeline
1 articles · newest firstRelated CVEs
by mentions- CVE-2026-71211<1%7.1MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation…
Appears with
- Zero Day Initiativeorganization · 1
- MLflowproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.