---
id: CVE-2026-71211
title: >-
  MLflow's AI Gateway accepts an auth_config.api_base value when creating a
  gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no
  validation of scheme, host, or IP range; the value is stored verbatim
summary: >-
  MLflow's AI Gateway accepts an auth_config.api_base value when creating a
  gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no
  validation of scheme, host, or IP range; the value is stored verbatim. The
  gateway proxy…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N'
cwe:
  - CWE-918
published: '2026-08-05'
updated: '2026-08-10'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-71211'
references:
  - url: 'https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow'
    label: 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-71211'
  - url: >-
      https://github.com/mlflow/mlflow/commit/96b7d900e14227e0821981409d86f5fb6c59b386
  - url: 'https://github.com/mlflow/mlflow'
  - url: 'https://pypi.org/project/mlflow'
  - url: 'https://github.com/advisories/GHSA-h7x2-h6g9-p789'
tags:
  - nvd
  - exploit-available
  - osv
  - pip
epss: 0.0029
epssPercentile: 0.1923
ingestedAt: '2026-08-10T12:39:48.487Z'
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/Abdivasiyev2008/CVE-2026-71211-exploit'
  checkedAt: '2026-09-26T09:05:57.765Z'
exploitAvailable: true
aliases:
  - GHSA-h7x2-h6g9-p789
  - PYSEC-2026-3865
ecosystem: pip
vendor: mlflow
product: mlflow
affected:
  - 'mlflow >= 3.13.0, <= 3.15.2'
---

## Overview

MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-71211)

Affected packages:

- `mlflow >= 3.13.0, <= 3.15.2`

Source: https://osv.dev/vulnerability/GHSA-h7x2-h6g9-p789