MLflow SHAP load_explainer bug allows RCE (CVE-2026-118627)
ZDI rates the deserialization flaw 7.8 and says the victim must open a malicious page or file.
54
ZDI rates the deserialization flaw 7.8 and says the victim must open a malicious page or file.
Today 42 readers · 42 views · 34 reads · all time 158K views