ML
Product
MLflow
On CISA KEVExploited in the wild
78
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 19High 47Medium 10Low 2
Watch
Add MLflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64849 In wildKEV | 9.3 | Aug 17 | MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) Affected: 3.3.0 before 3.15.0 |
Showing 1