CVE-2026-71211

mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy Endpoint

MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.

Affected

mlflow

CVSS v3.1 CNA

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

EPSS

0.29% chance of exploitation in the next 30 days, 20th percentile

Published

2026-08-05

Updated

2026-08-10

Proof-of-concept exploits (1)

• Abdivasiyev2008/CVE-2026-71211-exploit0★ · 2026-08-05

Security advisories

• advisories/GHSA-h7x2-h6g9-p789

References

• CVE Record
• NVD entry