PT-2026-41843 · Mlflow · Mlflow

Published 2026-05-19 · Updated 2026-05-29 · CVE-2026-2611

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MLflow version 3.9.0

Description The MLflow Assistant feature contains improper origin validation in its '/ajax-api' endpoints. This allows a remote attacker to use cross-origin requests from a malicious webpage to interact with an MLflow Assistant instance running on a victim's local machine. By bypassing the loopback-only restriction, an attacker can modify the Assistant's configuration to enable full access, leading to the execution of arbitrary commands via the Claude Code sub-agent.

Recommendations Update to version 3.10.0.

Exploit

Fix

RCE

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

BIT-MLFLOW-2026-2611

CVE-2026-2611

GHSA-67C5-X5MF-RPPQ

Affected Products

Mlflow

References · 10

• 🔥 https://huntr.com/bounties/8462addd-b464-4a84-b6a2-5529604e6e5a · Exploit
• https://osv.dev/vulnerability/GHSA-67c5-x5mf-rppq · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mlflow-2026-2611 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2611 · Security Note
• https://github.com/mlflow/mlflow/commit/8f9c8a53af90842944101eb8b7d60706822c81bc · Note
• https://github.com/mlflow/mlflow · Note
• https://twitter.com/dailycve/status/2058343208933859744 · Twitter Post
• https://t.me/CVEtracker/54211 · Telegram Post
• https://t.me/cveNotify/164656 · Telegram Post
• https://twitter.com/UpwindMDR/status/2056869084705300781 · Twitter Post