{"uuid": "20540d3d-2975-4cd3-b3ff-0f7bb9bae9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtjbmdtena2n", "content": "CISA says attackers are actively exploiting CVE-2026-64849 in MLflow, using a DNS-rebinding SSRF bypass to reach internal services and cloud metadata, risking AWS IAM credential theft on unpatched systems. #MLflow #CISA #AWS", "creation_timestamp": "2026-08-20T12:45:23.150254Z"}