Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HiddenLayer

Description

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mlflow mlflow

Default version status: unaffected

  • 0.0.1 to ≤ *affected

References