CISA warns of hackers exploiting critical MLflow vulnerability

CISA warned that a critical MLflow vulnerability (CVE-2026-64849) — an unauthenticated DNS-rebinding SSRF bypass in MLflow's webhook/test endpoint — is being exploited in the wild and can be used to access internal services and cloud metadata (e.g., AWS IMDS), enabling theft of cloud credentials; the flaw was patched in MLflow 3.15.0 and CISA added it to its KEV catalog and mandated patching for federal agencies under BOD 26-04.