CVE-2026-118628: MLflow get-artifacts Server-Side Request Forgery

GitHub Advisory Database

This story is part of the morning brief CPython memory bug lets poisoned model templates escape AI inference sandboxes. The reporting lives at the original source.

Read at GitHub Advisory Database

RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.