Attackers Exploit Critical Flaw in MLflow, an AI Platform Downloaded 30M Times Monthly

The MLflow SSRF flaw CVE-2026-64849 can let unauthenticated attackers access internal services and cloud metadata, potentially exposing sensitive credentials and secrets.

First seen on hackread.com

Jump to article: hackread.com/attackers-exploit-critical-mlflow-ai-platform-flaw/