EUVD-2026-17415

A command injection vulnerability exists in mlflow/mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for...

CVE-2026-0596

A command injection vulnerability exists in mlflow/mlflow when serving a model with "enablemlserver=True". The "modeluri" is embedded directly into a shell command executed via "bash -c" without proper sanitization. If the "modeluri" contains shell metacharacters, such as "$" or backticks, it...

CVE-2026-0596: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in mlflow/mlflow when serving a model with enablemlserver=True. The modeluri is embedded directly into a shell command executed via bash -c without proper sanitization. If the modeluri contains shell metacharacters, such as $ or backticks, it allows for...