MLflow SSRF redirect-bypass to metadata service (CVE-2026-64849)

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•3

Detects Server-Side Request Forgery (SSRF) attempts targeting an MLflow server where an attacker-controlled HTTP redirect response forces the server to reach out to the cloud instance metadata service at 169.254.169.254. This rule specifically looks for HTTP 30x redirect status codes where the Location header contains the sensitive metadata service IP address.