Detections
Analytics
SCA: security update for mlflow (GHSA-26p8-2jq9-3vq9)
critical Tenable Self-Hosted Container Security Plugin ID 477693
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- MLflow is an open source AI engineering platform for agents, large language models, and machine learning
models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py
accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than requiring an exact
allowed module. A caller can use MLflow artifact endpoints to place a Python module beneath a writable
allowed package and submit its module and class through /ajax-api/3.0/mlflow/scorer/invoke.
Scorer.model_validate_json() imports the module and constructs the class before trace processing.
Authentication-disabled deployments permit this code execution without credentials, while basic-auth
deployments require a principal capable of creating an experiment and run and uploading artifacts. In
either configuration, the allowed scorer package must be writable by the server process. This issue is
fixed in version 3.17.0. (CVE-2026-116692)
Solution
Update the mlflow library and its related packages to version 3.17.0 or later.See Also
Plugin Details
Severity: Critical
ID: 477693
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 10/28/2026
Updated: 10/28/2026
Risk Information
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-116692
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/27/2026
Vulnerability Publication Date: 10/27/2026
Reference Information
CVE: CVE-2026-116692