Threats tagged 'bit-mlflow-2024-37052'

A deserialization vulnerability exists in the MLflow platform versions 1.1.0 up to but not including 2.14.2. This flaw allows a maliciously crafted scikit-learn model to execute arbitrary code on a user's system when the model is interacted with. The vulnerability is classified as high severity. A patch is available to remediate this issue.