CVE-2026-2611— MLflow 访问控制错误漏洞

Improper Origin Validation in mlflow/mlflow

In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. By bypassing the loopback-only restriction, the attacker can modify the Assistant's configuration to enable full access, which in turn allows the execution of arbitrary commands via the Claude Code sub-agent. This issue is resolved in version 3.10.0.

N/A

源验证错误

MLflow 访问控制错误漏洞

MLflow是MLflow开源的一个简化机器学习开发的平台，包括跟踪实验、将代码打包成可重复的运行以及共享和部署模型。 MLflow 3.9.0版本存在访问控制错误漏洞，该漏洞源于MLflow Assistant功能中ajax-api端点来源验证不当，允许远程攻击者利用恶意网页的跨域请求与受害者本地机器上运行的MLflow Assistant交互，绕过仅限回环的限制修改Assistant配置以启用完全访问，从而通过Claude Code子代理执行任意命令。

N/A

N/A