Lucene search
+L

210 matches found

osv_ghsa
osv_ghsa
•added 2026/10/27 9:26 p.m.•5 views

GHSA-J7QQ-VR8C-XVW3 MLflow CrewAI autologging records LLM provider API keys in logged trace spans

Summary mlflow.crewai.autolog leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI Agent is instrumented with MLflow autologging, MLflow serializes the agent's dict and converts its fields to strings. The llm field contains the CrewAI LLM object, whose string representati...

6.5CVSS6.1AI score0.00207EPSS
SaveExploits0References5
Rows per page
Query Builder