Critical Flaw In Ai Testing Framework Mlflow Can Lead To Server And Data Compromise

A critical vulnerability in the popular MLflow platform was recently patched, which could have exposed AI and machine-learning models stored in the cloud and allowed for lateral movement. The vulnerability was discovered by Dan McInerney, a senior security engineer with cybersecurity startup Protect AI, and could have allowed attackers to extract sensitive information from servers such as SSH keys and AWS credentials.