// tag
MLflow
Security incidents tagged MLflow. Newest first.
- incidents
- 1
- live
- 0
- patched
- 1
## 1 MLflow incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 1 older incident1 older incident
August 2026 1
highMLflow MLflow: MLflow Server-Side Request Forgery Vulnerabilitypatched
› MLflow MLflow patched
MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body. Added to CISA KEV on 2026-08-19.
open incident →CVE-2026-64849
