StackRadar

CVE-2026-64849

CriticalKEV

Advisory

Published 17 Aug 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.164
97th percentile
CISA KEV
Listed
since 19 Aug 2026
Charts affected
11
of 17,781 indexed, latest versions
Container images
12
deployed by those charts
Fix available
1 of 1
affected package

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 12 images.

Affected packageAffected versionsFixed inImages
mlflowpypi1.9.1, 1.25.0, 1.26.1, 1.30.1+5 more3.15.012
OSV records
GHSA-7gwp-5pfp-969j
Also known as
BIT-mlflow-2026-64849, PYSEC-2026-3687

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
mlflow@2.11.3
3.15.0

Open the chart page →

2,452
mlflow-controllermlflow-deployment-controller0.1.82 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
mlflow@1.25.0
3.15.0
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
mlflow@2.1.1
3.15.0

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
mlflow@2.1.1
3.15.0

Open the chart page →

5,804
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
mlflow@3.14.0
3.15.0
maponyacharles/sceptreai:api-0.1.127b37b092130a
mlflow@3.14.0
3.15.0

Open the chart page →

4,369
datagrokdatagrok1.0.31 of 7See more

datagrok datagrok 1.0.3

1 of the 7 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
datagrok/grok_spawner:latest8c2d48c1545c
mlflow@3.14.0
3.15.0

Open the chart page →

2,328
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
mlflow@1.9.1
3.15.0

Open the chart page →

4,422
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
mlflow@1.9.1
3.15.0

Open the chart page →

4,422
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
mlflow@1.26.1
3.15.0

Open the chart page →

4,156
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
mlflow@1.30.1
3.15.0

Open the chart page →

3,158
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
mlflow@2.3.0
3.15.0

Open the chart page →

3,811
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-64849.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
mlflow@2.2.1
3.15.0

Open the chart page →

5,456

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
larribas/mlflow:1.9.105ccb0b46bfb
mlflow@1.9.1
3.15.0
2
buntha/mlflow:2.1.1154542cc3083
mlflow@2.1.1
3.15.0
1
datagrok/grok_spawner:latest8c2d48c1545c
mlflow@3.14.0
3.15.0
1
evk02/mlflow:2.2.1ef6ff257ef35
mlflow@2.2.1
3.15.0
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
mlflow@1.26.1
3.15.0
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
mlflow@3.14.0
3.15.0
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
mlflow@3.14.0
3.15.0
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
mlflow@2.3.0
3.15.0
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
mlflow@1.25.0
3.15.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
mlflow@2.1.1
3.15.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
mlflow@2.11.3
3.15.0
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
mlflow@1.30.1
3.15.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.