CVE-2026-33865

A flaw was found in MLflow, a platform for managing the machine learning lifecycle. This Stored Cross-Site Scripting XSS vulnerability, a type of injection where malicious scripts are injected into trusted websites, is caused by the unsafe parsing of YAML-based MLmodel artifacts in its web...