Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10766 Weak Hash Vulnerability in mlrun DataFrame Hash Handler Up to 1.12.0-rc3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10766
Post summary
The text announces CVE‑2026‑10766, a weak hash vulnerability affecting mlrun’s DataFrame Hash Handler up to version 1.12.0‑rc3, with no additional exploitation or mitigation information provided.
CVE-2026-10766 A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of… https://www.cve.org/CVERecord?id=CVE-2026-10766
Post summary
A CVE was identified in mlrun, affecting the calculate_dataframe_hash function in versions up to 1.12.0-rc3. Limited detail is provided, with no PoC, exploit, or patch referenced.