{"id":"CVE-2026-92568","summary":"MLRun through 1.11.0 Server-Side Request Forgery via Webhook","details":"MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes when the run reaches a terminal state, enabling requests to internal services, Kubernetes APIs, or cloud metadata endpoints from within the cluster.","modified":"2026-09-25T03:30:56.109329818Z","published":"2026-09-16T14:40:47.870Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92568.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92568.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92568"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/mlrun-through-1.11.0-server-side-request-forgery-via-webhook"},{"type":"REPORT","url":"https://github.com/mlrun/mlrun/issues/10041"},{"type":"PACKAGE","url":"https://github.com/mlrun/mlrun"},{"type":"ARTICLE","url":"https://github.com/mlrun/mlrun/blob/6007f29e8b1ca976ea632e8714a312df50cb13e7/mlrun/utils/notifications/notification/webhook.py#L33-L94"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mlrun/mlrun","events":[{"introduced":"0"},{"fixed":"6007f29e8b1ca976ea632e8714a312df50cb13e7"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.11.0"},{"fixed":"1.11.0"}],"source":["AFFECTED_FIELD","DESCRIPTION"]}}],"versions":["v1.12.0-rc4","v1.12.0-rc3","v1.12.0-rc2","v1.12.0-rc1","v1.11.0-rc47","v1.11.0-rc46","v1.11.0-rc45","v1.11.0-rc44","v1.11.0-rc43","v1.11.0-rc42","v1.11.0-rc41","v1.11.0-rc40","v1.11.0-rc39","v1.11.0-rc38","v1.11.0-rc37","v1.11.0-rc36","v1.11.0-rc35","v1.11.0-rc34","v1.11.0-rc33","v1.11.0-rc32","v1.11.0-rc31","v1.11.0-rc30","v1.11.0-rc29","v1.11.0-rc28","v1.11.0-rc27","v1.11.0-rc26","v1.11.0-rc25","v1.11.0-rc24","v1.11.0-rc23","v1.11.0-rc22","v1.11.0-rc21","v1.11.0-rc20","v1.11.0-rc18","v1.10.1-rc10","v1.11.0-rc17","v1.11.0-rc16","v1.11.0-rc15","v1.11.0-rc14","v1.11.0-rc13","v1.11.0-rc12","v1.11.0-rc11+refatcor-navbar","v1.11.0-rc10+refatcor-navbar","v1.11.0-rc9","v1.11.0-rc8","v1.11.0-rc7","v1.11.0-rc6","v1.11.0-rc2","v1.11.0-rc5","v1.11.0-rc4","v1.11.0-rc3","v1.11.0-rc1","v1.10.0-rc38","v1.10.0-rc37","v1.10.0-rc36","v1.10.0-rc35","v1.10.0-rc34","v1.13.400","v1.13.399","v1.13.311-rc1","v1.13.309","v1.10.0-rc33","v1.10.0-rc32","v1.10.0-rc31","v1.10.0-rc30","v1.10.0-rc29","v1.10.0-rc28","v1.10.0-rc27","v1.10.0-rc26","v1.10.0-rc25","v1.10.0-rc24","v1.10.0-rc23","v1.10.0-rc22","v1.10.0-rc21","v1.10.0-rc20","v1.10.0-rc19","v1.10.0-rc18","v1.10.0-rc17","v1.10.0-rc16","v1.10.0-rc15","v1.10.0-rc14","v1.10.0-rc13","v1.10.0-rc12","v1.10.0-rc11","v1.10.0-rc10","v1.10.0-rc9","v1.10.0-rc8","v1.10.0-rc7","v1.10.0-rc6","v1.10.0-rc5","v1.10.0-rc4","v1.10.0-rc3","v1.10.0-rc2","v1.10.0-rc1","v1.8.0-rc47","v1.8.0-rc46","v1.8.0-rc45","v1.8.0-rc44","v1.8.0-rc43","v1.8.0-rc42","v1.8.0-rc41","v1.8.0-rc40","v1.8.0-rc39","v1.8.0-rc38","v1.8.0-rc37","v1.8.0-rc36","v1.8.0-rc35","v1.8.0-rc34","v1.8.0-rc33","v1.8.0-rc32","v1.8.0-rc31","v1.8.0-rc30","v1.8.0-rc29","v1.8.0-rc28","v1.8.0-rc27","v1.8.0-rc26","v1.8.0-rc25","v1.8.0-rc24","v1.8.0-rc23+pagination","v1.8.0-rc22","v1.8.0-rc21","v1.8.0-rc20","v1.8.0-rc19","v1.8.0-rc18","v1.8.0-rc17","v1.8.0-rc16","v1.8.0-rc15","v1.8.0-rc14+ml-5098","v1.8.0-rc11","v1.8.0-rc13","v1.8.0-rc12","v1.8.0-rc10","v1.8.0-rc9","v1.8.0-rc8","v1.8.0-rc7","v1.8.0-rc6","v1.8.0-rc5","v1.8.0-rc4","v1.8.0-rc3","v1.8.0-rc2","v1.8.0-rc1","v1.7.0-rc45","v1.7.0-rc44","v1.7.0-rc43","v1.7.0-rc42","v1.7.0-rc41","v1.7.0-rc40","v1.7.0-rc39","v1.7.0-rc38","v1.7.0-rc37","v1.7.0-rc36","v1.7.0-rc35","v1.7.0-rc34","v1.7.0-rc33","v1.7.0-rc32","v1.7.0-rc31","v1.7.0-rc30","v1.7.0-rc29","v1.7.0-rc28","v1.7.0-rc27","v1.7.0-rc26","v1.7.0-rc25","v1.7.0-rc24","v1.7.0-rc23","v1.7.0-rc22","v1.7.0-rc21","v1.7.0-rc20","v1.7.0-rc19","v1.7.0-rc18","v1.7.0-rc17","v1.7.0-rc16","v1.7.0-rc15","v1.7.0-rc14","v1.7.0-rc13","v1.7.0-rc12","v1.7.0-rc11","v1.7.0-rc11+cpj-mm","v1.7.0-rc10+cpj-mm","v1.7.0-rc9","v1.7.0-rc8","v1.7.0-rc7","v1.7.0-rc6","v1.7.0-rc5","v1.7.0-rc4","v1.7.0-rc3","v1.7.0-rc2","v1.7.0-rc1","v1.6.0-rc26","v1.6.0-rc25","v1.6.0-rc24","v1.6.0-rc23","v1.6.0-rc22","v1.6.0-rc21","v1.6.0-rc20","v1.6.0-rc19","v1.6.0-rc18","v1.6.0-rc17","v1.6.0-rc16","v1.6.0-rc15","v1.6.0-rc14","v1.6.0-rc13","v1.6.0-rc12","v1.6.0-rc11","v1.6.0-rc10","v1.6.0-rc9","v1.6.0-rc8","v1.6.0-rc7","v1.6.0-rc6","v1.6.0-rc5","v1.6.0-rc4","v1.6.0-rc3","v1.6.0-rc2","v1.6.0-rc1","v1.5.0-rc12","v1.5.0-rc11","v1.5.0-rc10","v1.5.0-rc9","v1.5.0-rc8","v1.5.0-rc7","v1.5.0-rc2","v1.5.0-rc6","v1.5.0-rc5","v1.5.0-rc4","v1.5.0-rc3","v1.5.0-rc1","v1.4.0-rc19","v1.4.0-rc18","v1.4.0-rc17","v1.4.0-rc16","v1.4.0-rc15","v1.4.0-rc14","v1.4.0-rc13","v1.4.0-rc12","v1.4.0-rc11","v1.4.0-rc10","v1.4.0-rc9","v1.4.0-rc8","v1.4.0-rc7","v1.4.0-rc6","v1.4.0-rc5","v1.4.0-rc4","v1.4.0-rc3","v1.3.0","v1.4.0-rc2","v1.4.0-rc1","v1.3.0-rc40","v1.3.0-rc39","v1.3.0-rc38","v1.3.0-rc37","v1.3.0-rc36","v1.3.0-rc35","v1.3.0-rc34","v1.3.0-rc33","v1.3.0-rc32","v1.3.0-rc31","v1.3.0-rc30","v1.3.0-rc29","v1.3.0-rc28","v1.3.0-rc27","v1.3.0-rc26","v1.3.0-rc25","v1.3.0-rc24","v1.3.0-rc23","v1.3.0-rc22","v1.3.0-rc21","v1.3.0-rc20","v1.3.0-rc19","v1.3.0-rc18","v1.3.0-rc17","v1.3.0-rc16","v1.3.0-rc15","v1.3.0-rc14","v1.3.0-rc13","v1.3.0-rc11","v1.3.0-rc10","v1.3.0-rc9","v1.3.0-rc8","v1.3.0-rc7","v1.3.0-rc6","v1.3.0-rc5","v1.3.0-rc4","v1.3.0-rc3","v1.3.0-rc2","v1.3.0-rc1","v1.2.0","v1.2.0-rc22","v1.2.0-rc21","v1.2.0-rc20","v1.2.0-rc19","v1.2.0-rc18","v1.2.0-rc17","v1.2.0-rc16","v1.2.0-rc15","v1.2.0-rc14","v1.2.0-rc13","v1.2.0-rc12","v1.2.0-rc11","v1.2.0-rc10","v1.2.0-rc9","v1.2.0-rc8","v1.2.0-rc7","v1.2.0-rc6","v1.2.0-rc5","v1.2.0-rc4","v1.2.0-rc3","v1.2.0-rc2","v1.2.0-rc1","v1.1.0","v1.1.0-rc33","v1.1.0-rc32","v1.1.0-rc31","v1.1.0-rc30","v1.1.0-rc29","v1.1.0-rc28","v1.1.0-rc27","v1.1.0-rc26","v1.1.0-rc25","v1.1.0-rc24","v1.1.0-rc23","v1.1.0-rc22","v1.1.0-rc21","v1.1.0-rc20","v1.1.0-rc19","v1.1.0-rc18","v1.1.0-rc17","v1.1.0-rc16","v1.1.0-rc15","v1.1.0-rc14","v1.1.0-rc13","v1.1.0-rc12","v1.1.0-rc11","unstable","v1.1.0-rc10","v1.1.0-rc9","v1.1.0-rc8","v1.1.0-rc7","v1.1.0-rc6","v1.1.0-rc5","v1.1.0-rc4","v1.1.0-rc3","v1.0.1","v1.0.0","v1.1.0-rc2","v1.1.0-rc1","v1.0.0-rc26","v1.0.0-rc25","v1.0.0-rc24","v1.0.0-rc23","v1.0.0-rc22","v1.0.0-rc21","v1.0.0-rc20","v1.0.0-rc19","v1.0.0-rc18","v1.0.0-rc17","v1.0.0-rc16","v1.0.0-rc15","v1.0.0-rc14","v1.0.0-rc13","v1.0.0-rc12","v1.0.0-rc11","v1.0.0-rc10","v1.0.0-rc9","v1.0.0-rc8","v1.0.0-rc7","v0.10.1-rc6","v1.0.0-rc6","v1.0.0-rc5","v0.10.0","v1.0.0-rc4","v1.0.0-rc3","v1.0.0-rc2","v1.0.0-rc1","v0.10.0-rc9","v0.10.0-rc8","v0.10.0-rc7","v0.10.0-rc6","v0.10.0-rc5","v0.10.0-rc4","v0.10.0-rc3","v0.9.1","v0.10.0-rc2","v0.10.0-rc1","v0.9.1-rc1","v0.9.0","v0.9.0-rc13","v0.9.0-rc12","v0.9.0-rc11","v0.9.0-rc10","v0.9.0-rc9","v0.9.0-rc8","v0.9.0-rc7","v0.9.0-rc6","v0.9.0-rc5","v0.9.0-rc4","v0.9.0-rc3","v0.9.0-rc2","v0.9.0-rc1","v0.8.0","v0.8.0-rc15","v0.8.0-rc14","v0.8.0-rc13","v0.8.0-rc12","v0.8.0-rc11","v0.8.0-rc10","v0.8.0-rc9","v0.8.0-rc8","v0.8.0-rc7","v0.8.0-rc6","v0.8.0-rc5","v0.8.0-rc4","v0.8.0-rc3","v0.8.0-rc2","v0.8.0-rc1","v0.7.0","v0.7.0-rc17","v0.7.0-rc16","v0.7.0-rc15","v0.7.0-rc14","v0.7.0-rc13","v0.7.0-rc12","v0.7.0-rc11","v0.7.0-rc10","v0.7.0-rc9","v0.7.0-rc8","v0.7.0-rc7","v0.7.0-rc6","v0.7.0-rc5","v0.7.0-rc4","v0.7.0-rc3","v0.7.0-rc2","v0.6.5-rc11","v0.7.0-rc1","v0.6.5-rc10","v0.6.5-rc9","v0.6.5-rc8","v0.6.5-rc7","v0.6.5-rc6","v0.6.5-rc5","v0.6.5-rc4","v0.6.5-rc3","v0.6.5-rc2","v0.6.5-rc1","v0.6.4","v0.6.4-rc13","v0.6.4-rc12","v0.6.4-rc11","v0.6.4-rc10","v0.6.4-rc9","v0.6.4-rc8","v0.6.4-rc7","v0.6.4-rc6","v0.6.4-rc5","v0.6.4-rc4","v0.6.4-rc3","v0.6.4-rc2","v0.6.4-rc1","v0.6.3","v0.6.3-rc12","v0.6.3-rc11","v0.6.3-rc10","v0.6.3-rc9","v0.6.3-rc8","v0.6.3-rc7","v0.6.3-rc6","v0.6.3-rc5","v0.6.3-rc4","v0.6.3-rc3","v0.6.3-rc2","v0.6.3-rc1","v0.6.2","v0.6.2-rc11","v0.6.2-rc10","v0.6.2-rc9","v0.6.2-rc8","v0.6.2-rc7","v0.6.2-rc6","v0.6.2-rc5","v0.6.2-rc4","v0.6.2-rc3","v0.6.2-rc2","v0.6.2-rc1","v0.6.1","v0.6.1-rc4","v0.6.1-rc3","v0.6.1-rc2","v0.6.1-rc1","v0.6.0","v0.6.0-rc13","v0.6.0-rc12","v0.6.0-rc11","v0.6.0-rc10","v0.6.0-rc9","v0.6.0-rc8","v0.6.0-rc7","v0.6.0-rc6","v0.6.0-rc5","v0.6.0-rc4","v0.6.0-rc3","v0.6.0-rc2","v0.6.0-rc1","v0.5.3-rc3","v0.5.3","v0.5.3-rc2","v0.5.3-rc1","v0.5.2","v0.5.2-rc2","v0.5.2-rc1","v0.5.1","v0.5.1-rc2","v0.5.1-rc1","v0.5.0","v0.4.10","v0.4.9","v0.4.8","v0.4.7","v0.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92568.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}]}