Forensic Summary
A critical unauthenticated SSRF vulnerability in MLflow (CVE-2026-64849, CVSS 9.3) is being actively exploited within hours of CVE assignment, allowing attackers to proxy requests through exposed Tracking Servers to cloud metadata endpoints and exfiltrate credentials and secrets. Threat intelligence from watchTowr's honeypot telemetry confirms indiscriminate scanning of internet-facing MLflow instances targeting well-known internal IP ranges. Organisations running MLflow versions below 3.15.0 are at immediate risk and should treat this as a critical, time-sensitive patching priority.
Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/cve-2026-64849-mlflow-ssrf-exploited-to-steal-cloud-credentials/
Top comments (0)