MLflow SHAP load_explainer bug allows RCE (CVE-2026-118627)
ZDI rates the deserialization flaw 7.8 and says the victim must open a malicious page or file.
Stories per day · 30 days
Relatedzdi4deserialization3information-disclosure3missing-authorization3remote-code-execution3ssrf3tracking-server3privilege-escalation2ai-gateway1pickle1shap1statsmodels1webhooks1
4 stories, newest first · one card per story
Stories tagged #mlflow
VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control
CERT/CC warns MLflow's dspy and statsmodels flavors bypass the MLFLOW_ALLOW_PICKLE_DESERIALIZATION control, enabling remote code execution.
3
U.S. CISA adds a MLflow flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited MLflow SSRF flaw CVE-2026-64849 (CVSS 9.3) to its KEV catalog; attackers are stealing cloud credentials from exposed instances.
2
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Attackers exploit MLflow SSRF CVE-2026-64849 (CVSS 9.3) to steal cloud credentials; CISA added it to KEV; FUXA flaw CVE-2026-25895 is being scanned.
2