mlrun

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

mlrun records in CISA KEV

No mlrun vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-62427 CVE-2026-92568 · GHSA-7w64-c3jh-vh86

MLRun through 1.11.0 Server-Side Request Forgery via Webhook

MEDIUM 57

MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-09-16 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0