Skip to content
OpenAdvisories

Vendor

mlrun

1 known vulnerabilities.

Products

mlrun 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-92568

    MLRun through 1.11.0 Server-Side Request Forgery via Webhook

    MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious…

    mlrun mlrun