CISA warns of hackers exploiting critical MLflow vulnerability

August 20, 2026 · BleepingComputer · Severity: CRITICAL

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform.

Key Takeaways

CISA warned federal agencies that threat actors are actively exploiting a critical vulnerability in the MLflow open-source AI platform.
The ongoing attacks target MLflow deployments used for AI engineering and machine learning workflows.
Organizations using MLflow should apply available patches immediately and monitor for signs of exploitation activity.