{"id":"CVE-2026-71211","title":"MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim","summary":"MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-918"],"published":"2026-08-05","updated":"2026-08-10","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71211","references":[{"url":"https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow","label":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71211"},{"url":"https://github.com/mlflow/mlflow/commit/96b7d900e14227e0821981409d86f5fb6c59b386"},{"url":"https://github.com/mlflow/mlflow"},{"url":"https://pypi.org/project/mlflow"},{"url":"https://github.com/advisories/GHSA-h7x2-h6g9-p789"}],"tags":["nvd","exploit-available","osv","pip"],"epss":0.00254,"epssPercentile":0.17253,"ingestedAt":"2026-08-10T12:39:48.487Z","exploits":{"github":1,"githubRepos":["https://github.com/Abdivasiyev2008/CVE-2026-71211-exploit"],"checkedAt":"2026-09-23T07:14:41.584Z"},"exploitAvailable":true,"aliases":["GHSA-h7x2-h6g9-p789","PYSEC-2026-3865"],"ecosystem":"pip","vendor":"mlflow","product":"mlflow","affected":["mlflow >= 3.13.0, <= 3.15.2"],"slug":"CVE-2026-71211","body":"## Overview\n\nMLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-71211)\n\nAffected packages:\n\n- `mlflow >= 3.13.0, <= 3.15.2`\n\nSource: https://osv.dev/vulnerability/GHSA-h7x2-h6g9-p789","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5458,"id":"CVE-2026-71211","ts":1788887284217,"field":"exploit_available","old":"false","new":"true"},{"seq":4341,"id":"CVE-2026-71211","ts":1788886398223,"field":"exploit_available","old":"true","new":"false"},{"seq":3070,"id":"CVE-2026-71211","ts":1788883061402,"field":"exploit_available","old":"false","new":"true"},{"seq":2099,"id":"CVE-2026-71211","ts":1788882466294,"field":"exploit_available","old":"true","new":"false"},{"seq":1165,"id":"CVE-2026-71211","ts":1788881903061,"field":"exploit_available","old":"false","new":"true"}]}