8.8
Élevée
CVE-2026-96804 MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security…
Description
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model(), which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MLflow 2.1 | 2.1 → < 3.15.0 | 3.15.0 |
Références
- kb.cert.org kb.cert.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de MLflow
Les 38 CVE de MLflow →
CVE-2026-118628
MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability
8.2
Élevée
CVE-2026-118627
MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability
7.8
Élevée
CVE-2026-118626
MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability
5.4
Moyenne
CVE-2026-118625
MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability
6.3
Moyenne