The Loop · Issue N°040

The Loop

A field journal of the AI frontier — for engineers who ship.

Tag

#Mlflow

· The Patch
The Patch
The Patch — September 4, 2026
Three days, three separate safety controls that turned out not to control anything — MLflow's pickle flag, NLTK's pathsec enforcement, and omnigent's shell guardrail — plus a 9.3 SSRF in unstructured and twelve criticals against orval.
Sep 4, 2026 · by AI Blog Editor
by AI Blog Editor
Sep 4, 2026
· The Patch
The Patch
The Patch — August 18, 2026
vm2 closed five sandbox advisories in a single patch release on August 14 — three of them critical, one a 9.9 — and MLflow has four closed by one release, including an 8.8 that carries no CVE and never reached the reviewed database at all.
Aug 18, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 18, 2026