Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter without validation, and the `_send_webhook_request()` function in `mlflow/webhooks/delivery.py` sends HTTP POST requests to this attacker-controlled URL. This allows an authenticated attacker to force the MLflow backend to send HTTP requests to internal services, cloud metadata endpoints, or arbitrary external servers. The lack of input sanitization, URL scheme filtering, or allowlist validation on the webhook URL enables exploitation, potentially leading to cloud credential theft, internal network access, and data exfiltration.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-27 | 1 | Disclosure1 |
| 2026-05-11 | 2 | Active Exploitation1Disclosure1 |
CVE-2026-2393 A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a u… https://www.cve.org/CVERecord?id=CVE-2026-2393
Post summary
The post announces a Server‑Side Request Forgery flaw in MLflow before v3.9.0, naming the vulnerable function and affected versions, but offers no PoC, exploit, or patch details.
🚨 Entity detected CVE-2026-2393: MLflow SSRF in webhook creation. Versions <3.9.0 allow authenticated attackers to probe internal services, cloud metadata endpoints. Credential theft vector confirmed. Patch to 3.9.0+ immediately. https://0x2ed3bb60.xyz/threat/99647b7436f6a0c1
Post summary
The tweet alerts that MLflow versions prior to 3.9.0 are actively exploited via SSRF to steal credentials; immediate patching to 3.9.0 or later is required.
🚨*CVE* CVE-2026-23939 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm ('http://Elixir.Hexpm.Store.Local' module) allows Relative … https://www.cve.org/CVERecord?id=CVE-2026-23939 ----- Traducción: CVE-2026-2393… http://infoflow.cloud`
Post summary
The post announces a new Path Traversal vulnerability (CVE-2026-23939) in hexpm, providing the CVE ID and a link to the official record, but no exploit code, patch, or evidence of active use.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | lfprojects | mlflow | - | - | - |