CVE-2026-64849

CISA Directs Federal Remediation for MLflow AI Platform Server-Side Request Forgery Flaw CVE-2026-64849

CISA issues urgent warning on CVE-2026-64849, a critical SSRF defect in open-source MLflow model registries allowing attackers to steal cloud IAM metadata and poison AI pipelines.