Will MLflow vulnerability be added to CISA KEV by September 2026?
[Auto-closed — deadline passed with no qualifying event] Market deadline was 2026-09-20 (2 days ago as of today 2026-09-22). No CISA KEV addition or authoritative vendor confirmation of active exploitation has been documented in recent intel or public sources.
Evidence: https://threatodds.com/markets/8f128bea-ec5c-49c9-95ce-67d84d162bbcMarket Overview
AI GENERATEDCISA has warned that threat actors are actively exploiting a critical vulnerability in MLflow, an open-source AI engineering platform. This signals imminent KEV addition and wider adoption of the exploit. Resolution: official CISA KEV catalog addition or public disclosure of exploitation by security vendor.
Primary SourceResolution Criteria
Vulnerability appears in CISA's Known Exploited Vulnerabilities (KEV) Catalog, OR official CISA advisory/Bleeping Computer or similar reputable source confirms active exploitation with specific attack details by September 2026.