9244 matches found
CLSA-2026-1790247571 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post11+tuxcare...
PT-2026-105449
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post11+tuxcare...
CVE-2026-96804
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
CVE-2026-96775
MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
Exploit for Deserialization of Untrusted Data in Lfprojects Mlflow
mlflow-pickle-rce Generic proof-of-concept for pickle deseria...
abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +265 more potentially affected by CVE-2026-96804 via mlflow (>=2.1.1, <=3.14.0)
mlflow PYPI version =2.1.1, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96804 Source advisory: MEND:CVE-2026-96804...
a2 (>=0.4.9, <=0.8.3), abnativ (>=1.1.0, <=1.2.9) +262 more potentially affected by CVE-2026-96804 via mlflow-skinny (>=2.1.1, <=3.14.0)
mlflow-skinny PYPI version =2.1.1, =0.4.9, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =1.12.1 - amzn-nova-customization-sdk 1.3.14 - amzn-nova-forge 1.3.14 and more Source cves: CVE-2026-96804 Source advisory:...
CVE-2026-96804 CVE-2026-96804
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
EUVD-2026-85421
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
CVE-2026-96804 CVE-2026-96804
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
CVE-2026-96804
The MLflow machine learning platform (versions 2.1.0 to 3.14.0 ) contains a vulnerability in its statsmodels flavor component. The _load_model() function fails to enforce the MLFLOW_ALLOW_PICKLE_DESERIALIZATION security control, allowing an attacker to execute arbitrary code by submitting a speci...
CVE-2026-96775 MLflow dspy bypasses pickle deserialization control
MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
EUVD-2026-85410
MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
CVE-2026-96775 MLflow dspy bypasses pickle deserialization control
MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +204 more potentially affected by CVE-2026-96775 via mlflow (>=2.18.0, <=3.12.0)
mlflow PYPI version =2.18.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775 Source advisory: MEND:CVE-2026-96775...
abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +234 more potentially affected by CVE-2026-96775 via mlflow-skinny (>=2.18.0rc0, <=3.13.0rc0)
mlflow-skinny PYPI version =2.18.0rc0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-96775 Source advisory: MEND:CVE-2026-96775...
CVE-2026-96775
The MLflow machine learning platform is vulnerable to arbitrary remote code execution (RCE) due to a flaw in the dspy flavor (versions >= 2.0 ). The issue stems from a security control bypass where the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False setting is only enforced if the model_path ends in...
CVE-2026-96804: Deserialization of Untrusted Data
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOWALLOWPICKLEDESERIALIZATION=False security control entirely in loadmodel, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
CVE-2026-96775: Deserialization of Untrusted Data
MLflow's dspy flavor, versions = 2.0, applies the MLFLOWALLOWPICKLEDESERIALIZATION=False security control only when the modelpath ends in .pkl, which allows a remote attacker to execute arbitrary code via a crafted MLmodel artifact...
PT-2026-97414
Name of the Vulnerable Software and Affected Versions MLflow versions 2.1.0 through 3.14.0 Description The statsmodel flavor in MLflow fails to implement the MLFLOW ALLOW PICKLE DESERIALIZATION=False security control within the load model function. This omission allows a remote attacker to execut...