Critical MLflow SSRF Flaw Exploited in the Wild

A critical unauthenticated server-side request forgery (SSRF) vulnerability in MLflow, tracked as CVE-2026-64849, is being actively exploited within hours of...