MLFlow unsafe deserialization
High severity
GitHub Reviewed
Published
Jun 4, 2024
to the GitHub Advisory Database
•
Updated Sep 29, 2025
Description
Published by the National Vulnerability Database
Jun 4, 2024
Published to the GitHub Advisory Database
Jun 4, 2024
Reviewed
Jun 5, 2024
Last updated
Sep 29, 2025
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.
References