Security Digest
MLflow: known exploited vulnerabilities
1 MLflow CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-08-19 | CVE-2026-64849 | MLflow MLflow MLflow Server-Side Request Forgery Vulnerability | 2026-09-02 |