CVE-2026-71211

7.1 HIGHpublic exploit available

Published 2026-08-05 · Updated 2026-08-10

AI risk analysis

Summary: The flaw allows an attacker to inject arbitrary API endpoints, potentially leading to unauthorized access or data exfiltration.
Exploitability: Exploitation requires control over the `auth_config.api_base` value and knowledge of the target system's gateway configuration.
Blast radius: If exploited, this could result in significant data breaches or unauthorized API calls affecting the entire system.
Prioritized remediation: Validate and sanitize the `api_base` parameter before storing it to prevent injection attacks.

auth-bypassapi-injectiondata-exfiltrationweb

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weaknesses

CWE-918

Public exploit & PoC references

https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow

All references

https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.