CVE-2026-116691

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.19.0 until 3.17.0, mlflow.crewai.autolog() records CrewAI Agent objects without consistently sanitizing nested credential-bearing values. mlflow/crewai/autolog.py::_get_agent_attributes() converts the Agent llm field to a string that includes the provider API key, while mlflow/crewai/autolog.py::_construct_full_inputs() expands the Agent object into mlflow.spanInputs. Applications can therefore send plaintext provider credentials to the MLflow trace backend or a configured OTLP destination, where trace readers can obtain them. This issue is fixed in version 3.17.0.

• CWE-200
• CWE-312
• CWE-532

• https://github.com/mlflow/mlflow/commit/20927930d27f0072fcfeb7f024f24ad8c5e77c47
• https://github.com/mlflow/mlflow/pull/25845
• https://github.com/mlflow/mlflow/releases/tag/v3.17.0
• https://github.com/mlflow/mlflow/security/advisories/GHSA-j7qq-vr8c-xvw3

Published

Oct 27, 2026

Last Modified

Oct 28, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116686The Model Context Protocol Python SDK is the official Python…6.5
• CVE-2026-116687CKEditor 5 is a modern JavaScript rich-text editor with an M…3.1
• CVE-2026-116688CKEditor 5 is a modern JavaScript rich-text editor with an M…8.1
• CVE-2026-116689follow-redirects is a Node.js HTTP and HTTPS client wrapper …5.9
• CVE-2026-11669Out of bounds read in Media in Google Chrome on ChromeOS pri…5.3
• CVE-2026-116690MLflow is an open source AI engineering platform for agents,…7.5
• CVE-2026-116692MLflow is an open source AI engineering platform for agents,…9.8
• CVE-2026-116693dd-trace is the Datadog APM client for Node.js. From 2.0.0 u…8.7
• CVE-2026-116694OpenTelemetry Python provides the Python API and SDK for Ope…6.3
• CVE-2026-116695Crass is a Ruby CSS parser that is compliant with the CSS Sy…5.3
• CVE-2026-116696russh is a Rust SSH client and server library that includes …3.3
• CVE-2026-11670Use after free in PDF in Google Chrome prior to 149.0.7827.1…8.8