MLflow

Tracked CVEs

Coverage timeline

• 
  MLflow SSRF flaw leaks secrets, CISA urges immediate patch

  www.securityweek.com · Aug 20, 2026
• 
  SSRF bug in MLflow (CVE-2026-64849) exposes cloud secrets

  securityaffairs.com · Aug 20, 2026
• 
  CISA flags MLflow SSRF flaw CVE-2026-64849 in KEV catalog

  www.cisa.gov · Aug 19, 2026
• 
  CISA Adds CVE-2026-64849 to Known Exploited Vulnerabilities Catalogue

  cisa.gov · Aug 19, 2026
• 
  MLflow SSRF flaw CVE-2026-64849 exposes internal services

  securityonline.info · Aug 18, 2026