{
  "id": "CVE-2026-64849",
  "vendor_project": "MLflow",
  "product": "MLflow",
  "description": "MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.",
  "kev_date_added": "2026-08-19",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}