Threats tagged 'bit-mlflow-2024-37054'

A deserialization vulnerability exists in the MLflow platform versions 0.9.0 and newer up to but not including 2.14.2. This flaw allows a maliciously crafted PyFunc model to execute arbitrary code on a user's system when the model is interacted with. The vulnerability is classified as high severity. A patch is available to address this issue.