CVE-2026-116691 | MLflow up to 3.16.x CrewAI Autolog mlflow/crewai/autolog.py mlflow.crewai.autolog missing encryption

October 27, 2026 Yanac

A vulnerability classified as problematic has been found in MLflow up to 3.16.x. Affected by this vulnerability is the function mlflow.crewai.autolog of the file mlflow/crewai/autolog.py of the component CrewAI Autolog. The manipulation leads to missing encryption of sensitive data.

This vulnerability is traded as CVE-2026-116691. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More