MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
What to do
- Upgrade to a fixed version: mlflow 3.15.0.
- This is exploited in the wild: treat it as urgent (CISA's federal deadline is Sep 2, 2026).
- Redeploy and restart long-running processes so they load the fixed code.
Affected packages
mlflow
- >= 3.3.0, < 3.15.0
- 3.15.0
Check your project: pip show mlflow
What changed
Added to CISA KEV on 2026-08-19: exploitation in the wild confirmed; federal remediation due 2026-09-02.