{"data":{"id":"6254d22a-6ab4-47ee-b330-d97a3687d872","title":"GHSA-j7qq-vr8c-xvw3: MLflow CrewAI autologging records LLM provider API keys in logged trace spans","summary":"MLflow's `mlflow.crewai.autolog()` serializes a CrewAI `Agent.__dict__` into span attributes, and the `llm` field's string form includes its `api_key` in plaintext. Applications using autologging can therefore send LLM provider API keys to the MLflow trace backend or configured OTLP destination without explicitly logging them. The issue was verified on MLflow 3.16.0 with CrewAI 1.15.18.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://github.com/advisories/GHSA-j7qq-vr8c-xvw3","publishedAt":"2026-10-27T21:26:39.000Z","cveId":"CVE-2026-116691","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":["mlflow@>= 2.19.0, < 3.17.0 (fixed: 3.17.0)"],"affectedPackageNames":["mlflow"],"affectedPackageRefs":["pypi:mlflow"],"affectedVendors":[],"affectedVendorsRaw":["MLflow","CrewAI","OpenAI","gpt-4.1-mini"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-28T00:05:48.688Z","kevDateAdded":null,"advisoryAliases":["GHSA-j7qq-vr8c-xvw3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-27T21:26:39.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}