8.6
High
CVE-2026-79721 Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously…
Description
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MLflow 0.0 | 0.0.1 → latest | No fix stated |
References
- www.hiddenlayer.com www.hiddenlayer.com
Timeline
- Published
- Last modified
Other CVEs of MLflow
The 38 CVEs of MLflow →
CVE-2026-118628
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
8.2
High
CVE-2026-118627
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
7.8
High
CVE-2026-118626
MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
5.4
Medium
CVE-2026-118625
MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
6.3
Medium