{"id":"CVE-2026-71211","published":"2026-08-05T08:16:43.367","lastModified":"2026-08-10T12:17:24.923","description":"MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.","cvssScore":7.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow","tags":[]}],"exploitRefs":[{"url":"https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows an attacker to inject arbitrary API endpoints, potentially leading to unauthorized access or data exfiltration.","exploitability":"Exploitation requires control over the `auth_config.api_base` value and knowledge of the target system's gateway configuration.","blast_radius":"If exploited, this could result in significant data breaches or unauthorized API calls affecting the entire system.","remediation":"Validate and sanitize the `api_base` parameter before storing it to prevent injection attacks.","tags":["auth-bypass","api-injection","data-exfiltration","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T07:03:52.546Z"}}