MLflow pickle evaluation artifact deserialization allows remote code execution
A user must open a malicious page or file; ZDI rates CVE-2026-118623 at CVSS 7.8.
44
A user must open a malicious page or file; ZDI rates CVE-2026-118623 at CVSS 7.8.
Today 42 readers · 42 views · 34 reads · all time 158K views