← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 19, 2026 · 00:00via CISA KEV

CVE-2026-64849 - MLflow Server-Side Request Forgery Vulnerability

Brief

MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.

Read more on CISA KEV