CERT/CC Vulnerability Notes·10d agoVU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control#deserialization#dspy#machine-learningVulnerability 2 min
Security Affairs·Aug 20, 2026 highU.S. CISA adds a MLflow flaw to its Known Exploited Vulnerabilities catalog#cisa#cloud-credentials#cve-2026-64849 in the wild
The Hacker News·Aug 20, 2026 highAttackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets#cisa#cloud-credentials#exploitation in the wild 3 min
