CVE-2026-115886

{
  "etk_id": "ETK-2026-2980",
  "cve_id": "CVE-2026-115886",
  "display_id": "CVE-2026-115886",
  "ghsa_id": "GHSA-2wqp-q3c6-ccj5",
  "euvd_id": "EUVD-2026-109184",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Server-side request forgery in MLflow scorer endpoints",
  "summary": "MLflow versions from 3.12.0rc0 through releases before 3.17.0 can allow scorer-related endpoints to trigger server-originated requests to attacker-selected destinations. Exploitation requires an unauthenticated MLflow server with the optional trulens and trulens-providers-litellm packages installed.",
  "mitigation": "Upgrade MLflow to version 3.17.0 or later. Until upgraded, require authentication for MLflow endpoints, remove the optional affected dependencies where not needed, and restrict outbound network access from the tracking server.",
  "vendor": "MLflow",
  "product": "mlflow",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 3.12.0rc0, < 3.17.0"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "3.17.0"
      ],
      "package_name": "mlflow",
      "purl": "pkg:pypi/mlflow"
    }
  ],
  "cwes": null,
  "cvss_score": 6.5,
  "cvss_src": "other",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.0027078,
  "t0_at": "2026-10-23T21:17:21.462000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-29T15:04:01.790983+00:00",
      "days": 5.7407445484143516,
      "is_lower_bound": false,
      "measured_at": "2026-10-23T21:17:21.462000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-10-29T00:00:00+00:00",
      "days": 6,
      "is_lower_bound": false,
      "measured_at": "2026-10-23T21:17:21.462000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-115886"
    },
    "public_poc": {
      "at": "2026-10-29T15:04:01.803511+00:00",
      "days": 5.740744693414352,
      "is_lower_bound": false,
      "measured_at": "2026-10-23T21:17:21.462000+00:00",
      "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-115886.yaml"
    },
    "trigger_signal": {
      "at": "2026-10-29T00:00:00+00:00",
      "days": 5.1129460416666666,
      "is_lower_bound": false,
      "measured_at": "2026-10-23T21:17:21.462000+00:00",
      "url": "https://vulncheck.com/cve/CVE-2026-115886"
    }
  }
}