Follow the latest coverage, related explainers and connected technology stories.
CISA added a critical vulnerability in the MLflow platform to its Known Exploited Vulnerabilities catalog after it allowed unauthenticated attackers to send requests to internal services and cloud metadata endpoints and read their responses. The vulnerability was fixed in version 3.15.0, while U.S. federal civilian agencies were instructed to secure affected systems within two weeks.