Brand
MLflow: actively exploited vulnerabilities
1 vulnerability in a MLflow product (MLflow) is in CISA’s catalog of exploited vulnerabilities. It was added on August 19, 2026.
-
1 vulnerability added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one MLflow category to your radar, or open its page.
- AI and automation 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- MLflow1 vulnerability, AI and automation
Name used by CISA: MLflow. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this MLflow list.
- Rank 1
MLflowCVE-2026-64849
MLflow Server-Side Request Forgery Vulnerability
CVSS severity 9.3critical
Added Aug 19, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.