{"cvss":0.0,"datePublished":"","dateUpdated":"","description":"MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source | Affected: Mlflow / mlflow | CVSS: 7.5 (HIGH) | EPSS: 0.00559 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-116690","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"mlflow","severity":"HIGH","source":"circl_kev","title":"CVE-2026-116690","vendor":""}