CVE-2026-92568

MediumCVSS 5.4

Published: 16/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Summary

A server-side request forgery vulnerability in MLRun through 1.11.0 in the WebhookNotification handler allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes when the run reaches a terminal state, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.

Risk Assessment

The risk includes the possibility of probing internal infrastructure, accessing Kubernetes APIs or cloud metadata, which could lead to data theft, privilege escalation, and full compromise of the environment.

Recommendation

Upgrade MLRun to a patched version, restrict user permissions to update runs, and implement filtering of destination addresses for webhook requests.

Other vulnerabilities in MLRun

CVE-2026-10766Low
In mlrun up to version 1.12.0-rc3, the function mlrun.utils.helpers.calculate_dataframe_hash in file mlrun/utils/helpers.py (DataFrame Hash Handler component) uses a weak hash. The attack requires local access and is difficult. The exploit has been publicly disclosed.

Original NVD description (English source)

MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes when the run reaches a terminal state, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS