MLflow CVE-2026-64849: unauthenticated SSRF via webhook endpoint

MLflow patched CVE-2026-64849 (CVSS 9.3), an unauthenticated server-side request forgery in its webhook endpoint that fetched caller-supplied URLs. The fix in 3.15.0 handles redirects and DNS rebinding inside the request handler rather than via an allowlist.

• CVE-2026-64849 is an unauthenticated SSRF in MLflow's webhook, CVSS 9.3
• Fixed in MLflow 3.15.0, advisory GHSA-7gwp-5pfp-969j
• A single GET request can return a token or signed URL to the attacker
• Scanning found tens of thousands of exposed MLflow instances