{"schema":"vulnpedia.research/1","cve":"CVE-2026-64849","references":[{"url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j"}]},{"url":"https://github.com/mlflow/mlflow/issues/24179","tags":["x_refsource_MISC","Exploit","Issue Tracking","Mitigation","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","url":"https://github.com/mlflow/mlflow/issues/24179"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://github.com/mlflow/mlflow/issues/24179"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow/issues/24179"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow/issues/24179"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow/issues/24179"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://github.com/mlflow/mlflow/issues/24179"}]},{"url":"https://github.com/mlflow/mlflow/pull/24258","tags":["x_refsource_MISC","Issue Tracking","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","url":"https://github.com/mlflow/mlflow/pull/24258"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://github.com/mlflow/mlflow/pull/24258"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow/pull/24258"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow/pull/24258"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow/pull/24258"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://github.com/mlflow/mlflow/pull/24258"}]},{"url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939"}]},{"url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0","tags":["x_refsource_MISC","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-02T18:22:19.974Z","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849","tags":["government-resource","US Government Resource","WEB"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T17:23:38.873Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-01T17:23:38.873Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849"},{"source":"nvd","sourceId":"CVE-2026-64849","modified":"2026-10-05T13:35:35.850","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849"}]},{"url":"https://osv.dev/vulnerability/GHSA-7gwp-5pfp-969j","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://osv.dev/vulnerability/GHSA-7gwp-5pfp-969j"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://osv.dev/vulnerability/GHSA-7gwp-5pfp-969j"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64849","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64849"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64849"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64849"},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64849"}]},{"url":"https://github.com/advisories/GHSA-7gwp-5pfp-969j","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/advisories/GHSA-7gwp-5pfp-969j"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/advisories/GHSA-7gwp-5pfp-969j"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/advisories/GHSA-7gwp-5pfp-969j"}]},{"url":"https://github.com/mlflow/mlflow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/mlflow/mlflow"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://github.com/mlflow/mlflow"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/mlflow/mlflow"}]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-3687.yaml","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-3687.yaml"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-3687.yaml"}]},{"url":"https://pypi.org/project/mlflow","tags":["WEB","PACKAGE"],"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://pypi.org/project/mlflow"},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://pypi.org/project/mlflow"},{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://pypi.org/project/mlflow"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-3687","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-3687","modified":"2026-08-21T08:40:32.349552541Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://osv.dev/vulnerability/PYSEC-2026-3687"},{"source":"pysec","sourceId":"PYSEC-2026-3687","modified":"2026-08-21T08:40:32.349552541Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3687"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64849","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64849"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517655","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517655"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64849","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64849"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://access.redhat.com/errata/RHSA-2026:60520"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:60367","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://access.redhat.com/errata/RHSA-2026:60367"}]},{"source":"euvd","sourceId":"EUVD-2026-60473","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60473","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-60473","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60473"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://previdian.com/CVE-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://previdian.com/CVE-2026-64849"}]},{"url":"https://x.com/watchtowrcyber/status/2089685887420440637","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://x.com/watchtowrcyber/status/2089685887420440637"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"url":"https://cert.europa.eu/publications/threat-intelligence/cb26-09/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://cert.europa.eu/publications/threat-intelligence/cb26-09/"}]},{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-18&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-18&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-21&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-21&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-22&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-22&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-25&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-25&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-27&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-27&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-30&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-30&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-01&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-01&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-02&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-02&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-03&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-03&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-13&host_type=src&vulnerability=cve-2026-64849","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-13&host_type=src&vulnerability=cve-2026-64849"}]},{"url":"https://vulncheck.com/xdb/0ee6e9a8ebb6","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","url":"https://vulncheck.com/xdb/0ee6e9a8ebb6"}]},{"url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","url":"https://osv.dev/vulnerability/GHSA-7gwp-5pfp-969j","ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.3.0"},{"fixed":"3.15.0"}]}],"versions":["3.10.0","3.10.0rc0","3.10.1","3.11.0","3.11.0rc0","3.11.0rc1","3.11.1","3.12.0","3.12.0rc0","3.13.0","3.13.0rc0","3.14.0","3.3.0","3.3.1","3.3.2","3.4.0","3.4.0rc0","3.5.0","3.5.0rc0","3.5.1","3.6.0","3.6.0rc0","3.7.0","3.7.0rc0","3.8.0","3.8.0rc0","3.8.1","3.9.0","3.9.0rc0"],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-7gwp-5pfp-969j/GHSA-7gwp-5pfp-969j.json"},"modified":"2026-10-02T18:30:39.856988982Z","origins":[{"source":"ghsa","sourceId":"GHSA-7gwp-5pfp-969j","modified":"2026-10-02T18:30:39.856988982Z","url":"https://osv.dev/vulnerability/GHSA-7gwp-5pfp-969j"}]},{"source":"pysec","sourceId":"PYSEC-2026-3687","url":"https://osv.dev/vulnerability/PYSEC-2026-3687","ecosystem":"PyPI","name":"mlflow","purl":"pkg:pypi/mlflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.0"}]}],"versions":["0.0.1","0.1.0","0.2.0","0.2.1","0.3.0","0.4.0","0.4.1","0.4.2","0.5.0","0.5.1","0.5.2","0.6.0","0.7.0","0.8.0","0.8.1","0.8.2","0.9.0","0.9.0.1","0.9.1","1.0.0","1.1.0","1.1.1.dev0","1.10.0","1.11.0","1.12.0","1.12.1","1.13","1.13.1","1.14.0","1.14.1","1.15.0","1.16.0","1.17.0","1.18.0","1.19.0","1.2.0","1.20.0","1.20.1","1.20.2","1.21.0","1.22.0","1.23.0","1.23.1","1.24.0","1.25.0","1.25.1","1.26.0","1.26.1","1.27.0","1.28.0","1.29.0","1.3.0","1.30.0","1.30.1","1.4.0","1.5.0","1.6.0","1.7.0","1.7.1","1.7.2","1.8.0","1.9.0","1.9.1","2.0.0","2.0.0rc0","2.0.1","2.1.0","2.1.1","2.10.0","2.10.1","2.10.2","2.11.0","2.11.1","2.11.2","2.11.3","2.11.4","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.13.2","2.14.0","2.14.0rc0","2.14.1","2.14.2","2.14.2.dev0","2.14.3","2.15.0","2.15.0rc0","2.15.1","2.16.0","2.16.1","2.16.2","2.17.0","2.17.0rc0","2.17.1","2.17.2","2.18.0","2.18.0rc0","2.19.0","2.19.0rc0","2.2.0","2.2.1","2.2.2","2.20.0","2.20.0rc0","2.20.1","2.20.2","2.20.3","2.20.4","2.21.0","2.21.0rc0","2.21.1","2.21.2","2.21.3","2.22.0","2.22.0rc0","2.22.1","2.22.2","2.22.3","2.22.4","2.22.5","2.3.0","2.3.1","2.3.2","2.4.0","2.4.1","2.4.2","2.5.0","2.6.0","2.7.0","2.7.1","2.8.0","2.8.1","2.9.0","2.9.1","2.9.2","3.0.0","3.0.0rc0","3.0.0rc1","3.0.0rc2","3.0.0rc3","3.0.1","3.1.0","3.1.0rc0","3.1.1","3.1.2","3.1.3","3.1.4","3.10.0","3.10.0rc0","3.10.1","3.11.0","3.11.0rc0","3.11.0rc1","3.11.1","3.12.0","3.12.0rc0","3.13.0","3.13.0rc0","3.14.0","3.2.0","3.2.0rc0","3.3.0","3.3.0rc0","3.3.1","3.3.2","3.4.0","3.4.0rc0","3.5.0","3.5.0rc0","3.5.1","3.6.0","3.6.0rc0","3.7.0","3.7.0rc0","3.8.0","3.8.0rc0","3.8.1","3.9.0","3.9.0rc0"],"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/mlflow/PYSEC-2026-3687.yaml"},"modified":"2026-08-21T08:40:32.349552541Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-3687","modified":"2026-08-21T08:40:32.349552541Z","url":"https://osv.dev/vulnerability/PYSEC-2026-3687"}]}],"pocCandidates":[{"url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC","source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-18T22:24:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-18T22:24:18Z","url":"https://github.com/codeb0ssx/CVE-2026-64849-PoC"}],"tags":[]},{"url":"https://github.com/BiuTrap/CVE-2026-64849","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"CVE-2026-64849 PoC","modified":"2026-08-19T01:25:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/BiuTrap/CVE-2026-64849"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T01:25:09Z","url":"https://github.com/BiuTrap/CVE-2026-64849"}],"tags":[]},{"url":"https://github.com/zavisco/CVE-2026-64849.yaml","source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T14:25:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/zavisco/CVE-2026-64849.yaml"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-08-19T14:25:11Z","url":"https://github.com/zavisco/CVE-2026-64849.yaml"}],"tags":[]},{"url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"este laboratorio puede estar bien o mal preguntale a la IA estoy probando pero debe funcionar hahahah","modified":"2026-09-07T14:42:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-09-07T14:42:30Z","url":"https://github.com/isaca0315/CVE-2026-64849-poc-lab"}],"tags":[]},{"url":"https://github.com/maxprog-svg/CVE-2026-64849","source":"poc-in-github","sourceId":"CVE-2026-64849","description":"CVE-2026-64849 — MLflow SSRF","modified":"2026-10-25T09:19:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-64849","url":"https://github.com/maxprog-svg/CVE-2026-64849"},{"source":"poc-in-github","sourceId":"CVE-2026-64849","modified":"2026-10-25T09:19:14Z","url":"https://github.com/maxprog-svg/CVE-2026-64849"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"0ee6e9a8ebb6","url":"https://vulncheck.com/xdb/0ee6e9a8ebb6","cve":"CVE-2026-64849","dateAdded":"2026-09-07T07:14:02Z","modified":"2026-08-18T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/isaca0315/CVE-2026-64849-poc-lab","observations":[{"dateAdded":"2026-09-07T07:14:02Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"0ee6e9a8ebb6","modified":"2026-08-18T00:00:00Z","url":"https://vulncheck.com/xdb/0ee6e9a8ebb6"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:2feba54cbd221a4786bcab320c8438816b0632df71f82f23b123ed4a4a111210_ppc64le","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:2feba54cbd221a4786bcab320c8438816b0632df71f82f23b123ed4a4a111210_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A2feba54cbd221a4786bcab320c8438816b0632df71f82f23b123ed4a4a111210?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:304991bad591fadfed03b7f56ff6c265a6416e2e13fe02129dc253db4e13092f_s390x","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:304991bad591fadfed03b7f56ff6c265a6416e2e13fe02129dc253db4e13092f_s390x as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A304991bad591fadfed03b7f56ff6c265a6416e2e13fe02129dc253db4e13092f?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4cf62283b344149cbdaab95c7045df607d101745ff0657146de50087fbb2bfb5_amd64","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4cf62283b344149cbdaab95c7045df607d101745ff0657146de50087fbb2bfb5_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A4cf62283b344149cbdaab95c7045df607d101745ff0657146de50087fbb2bfb5?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64","product":"registry.redhat.io/rhoai/odh-mlflow-rhel9@sha256:4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256%3A4e1d4dc5b792364e2cfb31cd20e184c01aeff4ae0fa55dfc3d68aafb2a50a7f5?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9&tag=1787226790","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9@sha256:5743e64bd3a2947dc022830f2d769f4ff90daf04b3e6dcfaba6420815cdb52e5_arm64","product":"registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9@sha256:5743e64bd3a2947dc022830f2d769f4ff90daf04b3e6dcfaba6420815cdb52e5_arm64 as a component of Red Hat OpenShift AI 3.5","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60367"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-latency-predictor-prediction-rhel9@sha256%3A5743e64bd3a2947dc022830f2d769f4ff90daf04b3e6dcfaba6420815cdb52e5?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9&tag=1786552271","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9@sha256:ada20174176992b0ee306e6eface5bff06f06a71783f3deccd530a5bc4fe80a1_amd64","product":"registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9@sha256:ada20174176992b0ee306e6eface5bff06f06a71783f3deccd530a5bc4fe80a1_amd64 as a component of Red Hat OpenShift AI 3.5","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60367"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-latency-predictor-prediction-rhel9@sha256%3Aada20174176992b0ee306e6eface5bff06f06a71783f3deccd530a5bc4fe80a1?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9&tag=1786552271","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9@sha256:4f1a03f0801811aea4550346a041c079d1cbb80cdb6f128a513122eebe3f2cef_arm64","product":"registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9@sha256:4f1a03f0801811aea4550346a041c079d1cbb80cdb6f128a513122eebe3f2cef_arm64 as a component of Red Hat OpenShift AI 3.5","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60367"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-latency-predictor-training-rhel9@sha256%3A4f1a03f0801811aea4550346a041c079d1cbb80cdb6f128a513122eebe3f2cef?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9&tag=1786552250","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9@sha256:5bdb27b5f11d3057f9087b1e08e68b13e107541d595cbf9066d4f7a96a472ae9_amd64","product":"registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9@sha256:5bdb27b5f11d3057f9087b1e08e68b13e107541d595cbf9066d4f7a96a472ae9_amd64 as a component of Red Hat OpenShift AI 3.5","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:60367"},{"category":"workaround","details":"To reduce the attack surface for this vulnerability, restrict network access to the MLflow server. Implement firewall rules or network access controls to limit connectivity to the MLflow instance from untrusted networks. This operational control helps prevent unauthenticated attackers from reaching the vulnerable webhook test endpoint."}],"purl":"pkg:oci/odh-latency-predictor-training-rhel9@sha256%3A5bdb27b5f11d3057f9087b1e08e68b13e107541d595cbf9066d4f7a96a472ae9?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9&tag=1786552250","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:170e78670297c1c9435cff22c3f227edd58dc30993ebd0cb3d8265de838210af_arm64","product":"registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:170e78670297c1c9435cff22c3f227edd58dc30993ebd0cb3d8265de838210af_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ai-gateway-payload-processing-rhel9@sha256%3A170e78670297c1c9435cff22c3f227edd58dc30993ebd0cb3d8265de838210af?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9&tag=1787153594","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:e7d23a7fa4026469af734196cc0f56d5fdadd79eb5d04bb77c152019356ab679_arm64","product":"registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:e7d23a7fa4026469af734196cc0f56d5fdadd79eb5d04bb77c152019356ab679_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-built-in-detector-rhel9@sha256%3Ae7d23a7fa4026469af734196cc0f56d5fdadd79eb5d04bb77c152019356ab679?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-built-in-detector-rhel9&tag=1786617316","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50_ppc64le","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-operator-controller-rhel9@sha256%3A5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9&tag=1787002057","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:ecb3df75edbb66483eb73be3ae3c8ff8cc0818bee21a3c9b1997a357987afd91_amd64","product":"registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:ecb3df75edbb66483eb73be3ae3c8ff8cc0818bee21a3c9b1997a357987afd91_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-fms-guardrails-orchestrator-rhel9@sha256%3Aecb3df75edbb66483eb73be3ae3c8ff8cc0818bee21a3c9b1997a357987afd91?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9&tag=1787360218","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-autogluon-server-rhel9@sha256:769be2c4b300be556e21d7de02fa65d187c6b6897db591ee769a89aa8af3ab3d_s390x","product":"registry.redhat.io/rhoai/odh-kserve-autogluon-server-rhel9@sha256:769be2c4b300be556e21d7de02fa65d187c6b6897db591ee769a89aa8af3ab3d_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kserve-autogluon-server-rhel9@sha256%3A769be2c4b300be556e21d7de02fa65d187c6b6897db591ee769a89aa8af3ab3d?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-kserve-autogluon-server-rhel9&tag=1786612609","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:1085077ef74b6a23ff7a93472d80301ba188f50937db9883300f3695276a3c4e_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:1085077ef74b6a23ff7a93472d80301ba188f50937db9883300f3695276a3c4e_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3A1085077ef74b6a23ff7a93472d80301ba188f50937db9883300f3695276a3c4e?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9&tag=1787073479","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:2a8295827300b494da0e2e89127fdfc5db56be6ecffdaf94c6b0199964c573fe_amd64","product":"registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:2a8295827300b494da0e2e89127fdfc5db56be6ecffdaf94c6b0199964c573fe_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llama-stack-k8s-operator-rhel9@sha256%3A2a8295827300b494da0e2e89127fdfc5db56be6ecffdaf94c6b0199964c573fe?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9&tag=1787003492","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:04650101a70ed64e334a96753950a12fe18bf2852cb74dbd5599977132ac16bb_amd64","product":"registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:04650101a70ed64e334a96753950a12fe18bf2852cb74dbd5599977132ac16bb_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llm-d-inference-scheduler-rhel9@sha256%3A04650101a70ed64e334a96753950a12fe18bf2852cb74dbd5599977132ac16bb?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9&tag=1786611780","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-maas-controller-rhel9@sha256:7a0fb70187056361ebe58514e85ecc1e129766c41bd989ec79e5e00e51a53c34_arm64","product":"registry.redhat.io/rhoai/odh-maas-controller-rhel9@sha256:7a0fb70187056361ebe58514e85ecc1e129766c41bd989ec79e5e00e51a53c34_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-maas-controller-rhel9@sha256%3A7a0fb70187056361ebe58514e85ecc1e129766c41bd989ec79e5e00e51a53c34?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-maas-controller-rhel9&tag=1787153684","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:8de883d2499e57aa803911e915c0abd866ff6cc302c75db4e704e605a8e10501_amd64","product":"registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:8de883d2499e57aa803911e915c0abd866ff6cc302c75db4e704e605a8e10501_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256%3A8de883d2499e57aa803911e915c0abd866ff6cc302c75db4e704e605a8e10501?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9&tag=1787332141","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:a4fc3da982bcaa1d7431f86350dd682bad49a1357a4c4e0a8f05e35bdafdb7f8_s390x","product":"registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:a4fc3da982bcaa1d7431f86350dd682bad49a1357a4c4e0a8f05e35bdafdb7f8_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-automl-rhel9@sha256%3Aa4fc3da982bcaa1d7431f86350dd682bad49a1357a4c4e0a8f05e35bdafdb7f8?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9&tag=1787250508","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x","product":"registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-maas-rhel9@sha256%3A33ca5bc60d35bef45d2c5431455a2343c33ff4f68206a204fa5dcbbef1c8fd61?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9&tag=1787251250","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:f0bc48c41f95caffbdf209b5a0585f76e207429774da78705d6343922700643c_arm64","product":"registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:f0bc48c41f95caffbdf209b5a0585f76e207429774da78705d6343922700643c_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-controller-rhel9@sha256%3Af0bc48c41f95caffbdf209b5a0585f76e207429774da78705d6343922700643c?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-model-controller-rhel9&tag=1787207331","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:9e1b17341da14ede30d08cd51a8efd363a32340cdd65e4eb3abe9e4937973786_s390x","product":"registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:9e1b17341da14ede30d08cd51a8efd363a32340cdd65e4eb3abe9e4937973786_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-operator-rhel9@sha256%3A9e1b17341da14ede30d08cd51a8efd363a32340cdd65e4eb3abe9e4937973786?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-model-registry-operator-rhel9&tag=1787103216","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:97317c8bedd59e864fcedaf492f5867315b25ef27764069323bbbbeb570ebf23_amd64","product":"registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:97317c8bedd59e864fcedaf492f5867315b25ef27764069323bbbbeb570ebf23_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-must-gather-rhel9@sha256%3A97317c8bedd59e864fcedaf492f5867315b25ef27764069323bbbbeb570ebf23?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-must-gather-rhel9&tag=1786611326","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:f63b31c251afd3260357876fdbc5fc9521df4803875110f94916b10cfbb94c86_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:f63b31c251afd3260357876fdbc5fc9521df4803875110f94916b10cfbb94c86_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256%3Af63b31c251afd3260357876fdbc5fc9521df4803875110f94916b10cfbb94c86?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9&tag=1787073873","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:3b8f50c575b12c8ce89d42bb72085e153aa564c28786dcdfaa5c89d6afe6d30c_ppc64le","product":"registry.redhat.io/rhoai/odh-rhel9-operator@sha256:3b8f50c575b12c8ce89d42bb72085e153aa564c28786dcdfaa5c89d6afe6d30c_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-rhel9-operator@sha256%3A3b8f50c575b12c8ce89d42bb72085e153aa564c28786dcdfaa5c89d6afe6d30c?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1787569821","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:cdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23_amd64","product":"registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:cdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256%3Acdd7d9f982c1f8a94dd4aad43e705274aae1bf0942e0442e60c3973f9c198f23?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9&tag=1787076778","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:897df9e158d695a06f527c02e20635b7a0fed5dd8cfd832a0f9820b6abc3de09_arm64","product":"registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:897df9e158d695a06f527c02e20635b7a0fed5dd8cfd832a0f9820b6abc3de09_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-training-operator-rhel9@sha256%3A897df9e158d695a06f527c02e20635b7a0fed5dd8cfd832a0f9820b6abc3de09?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-training-operator-rhel9&tag=1787361677","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:a557a55432d276334a562b40c856db05bdb44ba859b88013925e777b01dbc10b_ppc64le","product":"registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:a557a55432d276334a562b40c856db05bdb44ba859b88013925e777b01dbc10b_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-service-operator-rhel9@sha256%3Aa557a55432d276334a562b40c856db05bdb44ba859b88013925e777b01dbc10b?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9&tag=1786614608","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396_ppc64le","product":"registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256%3A8b383544df737cf00bac9ce111db652e418e7c5afac87178545e81d63dda5396?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9&tag=1787121387","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:e15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256%3Ae15a412f74c1a63d3228cf473766769cc25245c29f84f189b82998fea7ed0524?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9&tag=1787073546","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","product":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]},{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64849","modified":"2026-10-15T03:01:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64849.json"}]}],"vendorCoverage":{"total":343,"shown":32,"omitted":311,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-08-18T00:00:00Z","modified":"2026-08-18T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"MLflow","product":"MLflow","dueDate":"2026-09-02T00:00:00Z","cisaDateAdded":"2026-08-19T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","modified":"2026-08-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://previdian.com/CVE-2026-64849","dateAdded":"2026-08-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://previdian.com/CVE-2026-64849"},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://x.com/watchtowrcyber/status/2089685887420440637"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-08-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/","dateAdded":"2026-08-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://expel.com/blog/the-ai-cve-exploitation-evidence-story-headlines-are-scarier-than-reality/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://cert.europa.eu/publications/threat-intelligence/cb26-09/","dateAdded":"2026-09-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://cert.europa.eu/publications/threat-intelligence/cb26-09/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","dateAdded":"2026-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-18&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-18&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-21&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-21&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-22&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-22&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-25&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-25&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-27&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-27&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-30&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-09-30T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-30&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-01&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-10-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-01&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-02&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-10-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-02&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-03&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-10-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-03&host_type=src&vulnerability=cve-2026-64849"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","catalog":"VulnCheck KEV","kind":"report","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-13&host_type=src&vulnerability=cve-2026-64849","dateAdded":"2026-10-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-64849","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-10-13&host_type=src&vulnerability=cve-2026-64849"}]}]}