Detections
Analytics
SCA: security update for mlflow (GHSA-2wqp-q3c6-ccj5)
medium Tenable Self-Hosted Container Security Plugin ID 477208
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- MLflow is an open source AI engineering platform for agents, large language models, and machine learning
models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including
unauthenticated POST /ajax-api/3.0/mlflow/scorer/invoke, accept serialized third-party scorer data that
Scorer.model_validate_json resolves using a module-path allowlist without constraining the selected class
or its constructor arguments. When optional trulens and trulens-providers-litellm packages are installed,
an attacker can select mlflow.genai.scorers.trulens, choose a model URI outside MLflow's native provider
registry so execution uses the LiteLLM fallback, and supply api_base and api_key values that cause the
server to send an outbound request to an attacker-chosen or internal host with attacker-controlled headers
and body. The vulnerable deserialization occurs before a tracking-store lookup or job submission. This
issue is fixed in version 3.17.0. (CVE-2026-115886)
Solution
Update the mlflow library and its related packages to version 3.17.0 or later.See Also
Plugin Details
Severity: Medium
ID: 477208
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/24/2026
Updated: 10/24/2026
Risk Information
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2026-115886
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/23/2026
Vulnerability Publication Date: 10/23/2026
Reference Information
CVE: CVE-2026-115886