Beveiligingsadvies

CVE-2026-92568

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 14:40:47

Laatst bijgewerkt 2026-09-16 15:23:26

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes when the run reaches a terminal state, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.

← Alle CVE's bekijken Bekijk op cve.org ↗