If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-69148 - MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

CVE ID : CVE-2026-69148 Published : Aug. 17, 2026, 10:17 p. m. • 50 minutes ago Description : MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3. 15. 0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or _validate_source_model() in mlflow/server/handlers. py verifies only path containment, allowing authenticated users to create a model version that references another user's artifact directory and read files through GET /model-versions/get-artifact without the required READ permission. This issue is fixed in version 3. 15. 0. Severity: 7.1 • HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

·CVEFeed
Read →

You've reached the end of current stories for this search.