CyberRota Analysis
AI-GeneratedThe vulnerability in MLflow's AI Gateway allows authenticated users to create gateway secrets with unvalidated `auth_config.api_base` values, which can point to internal addresses. This oversight enables potential Server-Side Request Forgery (SSRF) attacks, exposing sensitive cloud-instance IAM credentials via metadata services. Organizations using MLflow should prioritize addressing this issue, especially those with users who have basic authentication access, to mitigate the risk of unauthorized access to internal resources.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body.