{
    "cve": "CVE-2026-67354",
    "vuln_id": "VULN-000005",
    "record": {
        "id": "VULN-000005",
        "schema_version": "v1",
        "preferred_id": "CVE-2026-64849",
        "aliases": [
            "CVE-2026-64849"
        ],
        "summary": "MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.",
        "references": [
            {
                "type": "external",
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2026-64849"
            }
        ],
        "severity": [],
        "affected": [],
        "source": {
            "kev": {
                "date_added": "2026-08-19",
                "vendor_project": "MLflow",
                "product": "MLflow"
            }
        },
        "flags": {
            "known_exploited": true
        }
    }
}