vulnerability
MLflow Vulnerability Exploited for Cloud Credential Theft
Critical
Summary
A vulnerability in MLflow, a popular AI engineering platform, has been exploited by threat actors to steal cloud credentials and secrets. The flaw, tracked as CVE-2026-64849, allows unauthenticated SSRF attacks, leading to widespread exploitation and prompting immediate patching recommendations from CISA and other security organizations.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data