CVE-2026-116691: CVE-2026-116691: Cleartext LLM Provider API Key Disclosure in MLflow CrewAI Autologging

MLflow has disclosed two vulnerabilities. CVE-2026-116691 affects versions 2.19.0 through 3.16.x, where CrewAI autologging fails to sanitize LLM objects, exposing plaintext API keys in OpenTelemetry trace spans. Additionally, CVE-2026-116692 impacts versions 3.12.0rc0 to 3.17.0, allowing Remote Code Execution. This flaw results from permissive module prefix checks during third-party GenAI evaluation scorer deserialization, enabling attackers to execute code via the /ajax-api/3.0/mlflow/scorer/invoke endpoint by uploading crafted Python files as run artifacts.