Three Deserialization Vulnerabilities in Microsoft Qlib Enable Remote Code Execution

ZDI disclosed three remote code execution flaws in Microsoft Qlib components on November 2, 2026, requiring user interaction via malicious content.

ZDI published advisories for three deserialization vulnerabilities in Microsoft Qlib on November 2, 2026. The components affected are RestrictedUnpickler, MLflowRecorder, and StaticDataLoader, each allowing remote attackers to execute arbitrary code by deserializing untrusted data. Exploitation needs user interaction such as visiting a malicious page or opening a malicious file. All three issues carry a CVSS rating of 7.8. No patches exist yet, and the flaws remain unconfirmed in the wild.