Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-64849

MLflow Server-Side Request Forgery Vulnerability

9.3
CVSS 3.1
1
story
AUG 19
added to KEV
Severity
9.3 Critical · vendor score
Vendor
MLflow
Product
MLflow
Published
Aug 17, 2026
Added to KEV
Aug 19, 2026
KEV deadline
Sep 2, 2026
Ransomware use
Unknown
Weakness
CWE-918

What it is

MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. AIMLflow Bug Actively Exploited to Steal CredentialsThis flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.DENNIS FISHER · 2 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Exploitgithub.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969jFixgithub.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939Fixgithub.com/mlflow/mlflow/pull/24258Exploitgithub.com/mlflow/mlflow/issues/24179