8.8
Élevée
CVE-2026-96775 MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when…
Description
MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MLflow | 2.0 | Pas de correctif indiqué |
Autres CVE de MLflow
Les 38 CVE de MLflow →
CVE-2026-118628
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
8.2
Élevée
CVE-2026-118627
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
7.8
Élevée
CVE-2026-118626
MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
5.4
Moyenne
CVE-2026-118625
MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
6.3
Moyenne