MLflow security advisory (AV26-832)
Serial Number: AV26-832Date: August 19, 2026 As of August 17, 2026, MLflow is affected by vulnerabilities in the following product: MLflow Prior to 3.15.0 On August 19, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-64849 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release v3.15.0 · mlflow/mlflow · GitHub…
KEV ✓ EPSS 0.01 CVE-2026-64849 MLflow CISA veřejná správa CA US 3 zdrojů