CVE-2026-10766

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10766", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-06-03T15:40:30.561Z", "datePublished": "2026-06-03T20:00:11.168Z", "dateUpdated": "2026-06-04T12:38:07.573Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-03T20:00:11.168Z"}, "title": "mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-328", "lang": "en", "description": "Use of Weak Hash"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-327", "lang": "en", "description": "Risky Cryptographic Algorithm"}]}], "affected": [{"vendor": "n/a", "product": "mlrun", "versions": [{"version": "1.12.0-rc1", "status": "affected"}, {"version": "1.12.0-rc2", "status": "affected"}, {"version": "1.12.0-rc3", "status": "affected"}], "cpes": ["cpe:2.3:a:mlrun:mlrun:*:*:*:*:*:*:*:*"], "modules": ["DataFrame Hash Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.6, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.6, "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.4, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-06-03T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-06-03T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-06-03T17:45:34.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Dem0 (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/368136", "name": "VDB-368136 | mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/368136/cti", "name": "VDB-368136 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10766", "name": "CVE-2026-10766 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/831419", "name": "Submit #831419 | mlrun v1.12.0-rc3 Hash Collision", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mlrun/mlrun/issues/9691", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/mlrun/mlrun/pull/9692", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/mlrun/mlrun/", "tags": ["product"]}]}, "adp": [{"references": [{"url": "https://github.com/mlrun/mlrun/issues/9691", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-04T12:37:43.312930Z", "id": "CVE-2026-10766", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-04T12:38:07.573Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10766", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-04T12:37:43.312930Z"}}}], "references": [{"url": "https://github.com/mlrun/mlrun/issues/9691", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-04T12:38:02.492Z"}}], "cna": {"title": "mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash", "credits": [{"lang": "en", "type": "reporter", "value": "Dem0 (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.4, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:mlrun:mlrun:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["DataFrame Hash Handler"], "product": "mlrun", "versions": [{"status": "affected", "version": "1.12.0-rc1"}, {"status": "affected", "version": "1.12.0-rc2"}, {"status": "affected", "version": "1.12.0-rc3"}]}], "timeline": [{"lang": "en", "time": "2026-06-03T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-06-03T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-06-03T17:45:34.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/368136", "name": "VDB-368136 | mlrun DataFrame Hash helpers.py mlrun.utils.helpers.calculate_dataframe_hash weak hash", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/368136/cti", "name": "VDB-368136 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10766", "name": "CVE-2026-10766 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/831419", "name": "Submit #831419 | mlrun v1.12.0-rc3 Hash Collision", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mlrun/mlrun/issues/9691", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/mlrun/mlrun/pull/9692", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/mlrun/mlrun/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-328", "description": "Use of Weak Hash"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-327", "description": "Risky Cryptographic Algorithm"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-03T20:00:11.168Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10766", "state": "PUBLISHED", "dateUpdated": "2026-06-04T12:38:07.573Z", "dateReserved": "2026-06-03T15:40:30.561Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-03T20:00:11.168Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:mlrun:mlrun:*:*:*:*:*:*:*:*"], "modules": ["DataFrame Hash Handler"], "product": "mlrun", "vendor": "n/a", "versions": [{"status": "affected", "version": "1.12.0-rc1"}, {"status": "affected", "version": "1.12.0-rc2"}, {"status": "affected", "version": "1.12.0-rc3"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in mlrun up to 1.12.0-rc3. This impacts the function mlrun.utils.helpers.calculate_dataframe_hash of the file mlrun/utils/helpers.py of the component DataFrame Hash Handler. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance."}, {"lang": "es", "value": "Una vulnerabilidad ha sido encontrada en mlrun hasta 1.12.0-rc3. Esto afecta a la funci\u00f3n mlrun.utils.helpers.calculate_dataframe_hash del archivo mlrun/utils/helpers.py del componente Gestor de Hash de DataFrame. La manipulaci\u00f3n conduce al uso de hash d\u00e9bil. El ataque solo puede ser realizado desde un entorno local. La complejidad de un ataque es bastante alta. La explotabilidad se dice que es dif\u00edcil. El exploit ha sido divulgado al p\u00fablico y puede ser utilizado. La solicitud de extracci\u00f3n para solucionar este problema espera aceptaci\u00f3n."}], "id": "CVE-2026-10766", "lastModified": "2026-07-22T20:10:00.127", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 2.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 1.5, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.6, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 2.5, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10766", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-04T12:37:43.312930Z", "version": "2.0.3"}}]}, "published": "2026-06-03T20:16:18.463", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/mlrun/mlrun/"}, {"source": "cna@vuldb.com", "url": "https://github.com/mlrun/mlrun/issues/9691"}, {"source": "cna@vuldb.com", "url": "https://github.com/mlrun/mlrun/pull/9692"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-10766"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/831419"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/368136"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/368136/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/mlrun/mlrun/issues/9691"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-327"}, {"lang": "en", "value": "CWE-328"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.12.0-rc1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.12.0-rc2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.12.0-rc3"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "original": {"product": "mlrun", "source": "cna", "vendor": "n/a"}, "product": "mlrun", "vendor": "mlrun"}], "created": "2026-06-03T21:30:32.703048+00:00", "updated": "2026-06-05T10:11:19.317425+00:00", "vendors": ["mlrun", "mlrun$PRODUCT$mlrun"]}