CVE-2026-79721

mlflow / mlflow PUBLISHED

Description (CNA)

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.

Affected (CNA)

Vendor / product	Versions
mlflow / mlflow	affected 0.0.1 through *

CWE

CWE-829

References

https://www.hiddenlayer.com/sai-security-advisory/2026-09-mlflow

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.