{"vulnerability": "CVE-2026-6914", "sightings": [{"uuid": "6073b769-989d-408f-ab9e-57b474aae268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhtypny2p", "content": "CVE-2026-69149 - platform-server\nAngular Server-Side Rendering has a security flaw that allows attackers to inject malicious code into web pages. This can happen when user-controlled data is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#platformserver #angular #npm #CVE #infosec", "creation_timestamp": "2026-08-03T16:52:05.090601Z"}, {"uuid": "95676a6e-b42e-48f4-808f-5c9c3e2b827c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5nwaq22vg5q3w", "content": "CVE-2026-69149 - Angular SSR: Missing Fallback Raw-Content Serialization Escaping leads to Cross-Site Scripting (XSS)\nCVE ID : CVE-2026-69149\n \n Published : Aug. 3, 2026, 5:16 p.m. | 28\u00a0minutes ago\n \n Description : Angular is a development platform for building mobile and desk...", "creation_timestamp": "2026-08-03T18:14:13.124409Z"}, {"uuid": "d588d3a8-1c93-4189-8616-e111cf2fce26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschz4trhg2b", "content": "CVE-2026-69149 - angular.js\nAngular's platform-server module had a weakness that could allow hackers to inject malicious code into web pages. This has been fixed in versions 20.3.27,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#angularjs #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:26:04.012218Z"}, {"uuid": "8c166880-2e3c-4d24-8770-067328173dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtji4yxyoj2w", "content": "\ud83d\udea8 CVE-2026-64849 is a critical unauthenticated SSRF discovered in MLflow.\n\nIt lets attackers reach internal services and potentially steal sensitive data.\n\nUpgrade to version 3.15.0 as it also fixes two additional flaws affecting MLflow, CVE-2026-69148 and CVE-2026-69146. \n\nDetails: buff.ly/Gjg9jor", "creation_timestamp": "2026-08-20T14:42:04.665188Z"}, {"uuid": "512c2c56-2a81-4c49-ac80-689cbd1ae237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69146", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtji4yxyoj2w", "content": "\ud83d\udea8 CVE-2026-64849 is a critical unauthenticated SSRF discovered in MLflow.\n\nIt lets attackers reach internal services and potentially steal sensitive data.\n\nUpgrade to version 3.15.0 as it also fixes two additional flaws affecting MLflow, CVE-2026-69148 and CVE-2026-69146. \n\nDetails: buff.ly/Gjg9jor", "creation_timestamp": "2026-08-20T14:42:04.705389Z"}, {"uuid": "ef86c73b-7972-4127-ba68-46a530abd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T22:31:53.320452Z"}, {"uuid": "bcf805e0-f764-451a-9052-63dbb03cc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69148", "type": "published-proof-of-concept", "source": "https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw", "content": "", "creation_timestamp": "2026-08-17T22:35:03.620770Z"}, {"uuid": "546988e9-5d35-47ae-8978-571d17630a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-69146", "type": "published-proof-of-concept", "source": "https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5", "content": "", "creation_timestamp": "2026-08-17T22:35:05.877021Z"}, {"uuid": "6178e698-5390-4798-a551-d0c7f37420c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69146", "type": "seen", "source": "https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a", "content": "# CVE-2026-69146: CVE-2026-69146: Missing Authorization Bypass in MLflow Basic Authentication Middleware\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69146\n\n## Summary\nThis technical report details a missing authorization vulnerability (CVE-2026-69146 / GHSA-3p64-6gvh-82v5) affecting the MLflow platform from version 3.13.0 to 3.15.0. When MLflow is configured with the built-in basic-auth plugin, authenticated users can bypass run-level UPDATE authorization checks, enabling unauthorized dataset and model lineage metadata injection.\n\n## TL;DR\nAn authorization bypass vulnerability in MLflow's basic-auth middleware allows authenticated users to inject arbitrary dataset records into other users' runs without UPDATE permissions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS**: 6.5\n- **EPSS Status**: Not Populated\n- **Impact**: High Integrity (I:H)\n- **Exploit Status**: POC / Test-Suite Verified\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Platform Tracking Server\n- **MLflow**: >= 3.13.0, < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade to MLflow version 3.15.0 or later to integrate LogInputs and LogOutputs with the tracking server access control middleware.\n- Implement network boundary controls to limit access to the MLflow tracking port.\n- Apply reverse proxy or API gateway rules to filter and deny untrusted external traffic to the log-inputs and log-outputs REST endpoints.\n\n**Remediation Steps:**\n1. Verify the current MLflow version using package management tools or API server banners.\n2. Upgrade MLflow installations via 'pip install --upgrade mlflow>=3.15.0' or rebuild target containers using the updated image base.\n3. Ensure MLflow tracking servers are configured behind a web application firewall or reverse proxy.\n4. Configure log alerting for HTTP POST requests directed to /api/2.0/mlflow/runs/log-inputs originating from unexpected source networks.\n\n## References\n\n- [NVD CVE-2026-69146 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-69146)\n- [GitHub Security Advisory GHSA-3p64-6gvh-82v5](https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5)\n- [MLflow Security Fix Pull Request #24291](https://github.com/mlflow/mlflow/pull/24291)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69146) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T23:31:40.103609Z"}, {"uuid": "45130bc4-2293-4679-a449-f5bc37770c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fiwp2jlvglart", "content": "CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id\nCVE ID : CVE-2026-69148\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : MLflow is an open source AI engineering platform for agents, lar...", "creation_timestamp": "2026-08-17T23:47:49.993780Z"}, {"uuid": "7471fc04-fa73-4bfc-82c1-2afabda86853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69146", "type": "seen", "source": "https://gist.github.com/alon710/bb0c1f0112166e936833a909d435a77a", "content": "# CVE-2026-69146: CVE-2026-69146: Missing Authorization Bypass in MLflow Basic Authentication Middleware\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69146\n\n## Summary\nThis technical report details a missing authorization vulnerability (CVE-2026-69146 / GHSA-3p64-6gvh-82v5) affecting the MLflow platform from version 3.13.0 to 3.15.0. When MLflow is configured with the built-in basic-auth plugin, authenticated users can bypass run-level UPDATE authorization checks, enabling unauthorized dataset and model lineage metadata injection.\n\n## TL;DR\nAn authorization bypass vulnerability in MLflow's basic-auth middleware allows authenticated users to inject arbitrary dataset records into other users' runs without UPDATE permissions.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS**: 6.5\n- **EPSS Status**: Not Populated\n- **Impact**: High Integrity (I:H)\n- **Exploit Status**: POC / Test-Suite Verified\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Platform Tracking Server\n- **MLflow**: >= 3.13.0, < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade to MLflow version 3.15.0 or later to integrate LogInputs and LogOutputs with the tracking server access control middleware.\n- Implement network boundary controls to limit access to the MLflow tracking port.\n- Apply reverse proxy or API gateway rules to filter and deny untrusted external traffic to the log-inputs and log-outputs REST endpoints.\n\n**Remediation Steps:**\n1. Verify the current MLflow version using package management tools or API server banners.\n2. Upgrade MLflow installations via 'pip install --upgrade mlflow>=3.15.0' or rebuild target containers using the updated image base.\n3. Ensure MLflow tracking servers are configured behind a web application firewall or reverse proxy.\n4. Configure log alerting for HTTP POST requests directed to /api/2.0/mlflow/runs/log-inputs originating from unexpected source networks.\n\n## References\n\n- [NVD CVE-2026-69146 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-69146)\n- [GitHub Security Advisory GHSA-3p64-6gvh-82v5](https://github.com/mlflow/mlflow/security/advisories/GHSA-3p64-6gvh-82v5)\n- [MLflow Security Fix Pull Request #24291](https://github.com/mlflow/mlflow/pull/24291)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69146) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:01:16.074427Z"}, {"uuid": "1d6faba7-45f2-4edd-b1c9-7c5e29c14a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69148", "type": "seen", "source": "https://gist.github.com/alon710/21683b4d8ecf3653b83554b3c12c2c47", "content": "# CVE-2026-69148: CVE-2026-69148: Broken Object Level Authorization (BOLA) in MLflow Model Registry\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-69148\n\n## Summary\nMLflow prior to version 3.15.0 fails to perform proper authorization checks when registering model versions, allowing authenticated users with access to a registered model to link and access artifacts from runs and models belonging to other users without authorization.\n\n## TL;DR\nA Broken Object Level Authorization (BOLA) vulnerability in MLflow's Model Registry allows authenticated users to read private artifacts of arbitrary runs by registering them under their own model namespace.\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS**: 7.1 (High)\n- **EPSS Score**: Not Registered\n- **Impact**: Confidentiality (High), Integrity (Low)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- MLflow Server\n- **mlflow**: < 3.15.0 (Fixed in: `3.15.0`)\n\n## Mitigation\n\n- Upgrade MLflow server and client implementations to version 3.15.0 or later.\n- Enforce explicit backend cloud storage access boundaries via IAM policies to restrict broad file-system visual mappings.\n- Utilize reverse proxies or API gateways to inspect and drop unauthorized references to non-workspace entities.\n\n**Remediation Steps:**\n1. Determine currently running MLflow versions in active development and staging configurations.\n2. Update standard dependencies to require `mlflow>=3.15.0`.\n3. Redeploy server container instances containing the patched library code.\n4. Verify authorization policies are active and execute an administrative audit of currently registered models and mapped sources.\n\n## References\n\n- [GHSA-gqch-g4w5-7qcw: MLflow BOLA in CreateModelVersion](https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw)\n- [MLflow Pull Request 24293](https://github.com/mlflow/mlflow/pull/24293)\n- [MLflow Fix Commit 4bb7474771c3be808cd9e129defef9305f2869be](https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be)\n- [MLflow v3.15.0 Release](https://github.com/mlflow/mlflow/releases/tag/v3.15.0)\n- [CVE Record CVE-2026-69148](https://www.cve.org/CVERecord?id=CVE-2026-69148)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-69148) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T00:01:16.186734Z"}]}