Unauthenticated MLflow get-artifacts SSRF leaks data (CVE-2026-118628)
Original title: ZDI-26-844: MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
ZDI rates the flaw 8.2; the snippet gives no affected versions, fix, or exploitation status.
ZDI published ZDI-26-844 for an MLflow get-artifacts server-side request forgery flaw that can disclose sensitive information. Remote attackers do not need authentication. ZDI assigned CVSS 8.2 and CVE-2026-118628. Affected versions, a fix, and exploitation are not stated.
Unconfirmed: Affected versions, a patch, and whether the flaw is exploited are not stated.
- Authentication is not required to exploit the flaw.
- ZDI assigned a CVSS rating of 8.2.
- The advisory id is ZDI-26-844 and the CVE is CVE-2026-118628.
- No affected or fixed versions appear in the snippet.
Impact: Unauthenticated disclosure of sensitive information
| Product | Affected |
|---|---|
| MLflow | — |
- CVEs
- CVE-2026-118628
- Products
- MLflow
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-118628 | — | — | — |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.