{"cvss":0.0,"datePublished":"","dateUpdated":"","description":"MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints | Affected: Mlflow / mlflow | CVSS: 6.5 (MEDIUM) | EPSS: 0.00676 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-115886","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"mlflow","severity":"HIGH","source":"circl_kev","title":"CVE-2026-115886","vendor":""}