Attackers Exploit MLflow Flaw CVE-2026-64849 to Steal Cloud Secrets Hours After Release

Researchers at watchTowr observed attackers targeting cloud-hosted MLflow systems to extract credentials and secrets using an unauthenticated server-side reque…