Threats tagged 'bit-mlflow-2024-37058'

A deserialization vulnerability exists in MLflow platform versions 2.5.0 through before 2.14.2. This flaw allows a maliciously crafted Langchain AgentExecutor model to be uploaded and subsequently executed, enabling arbitrary code execution on the end user's system upon interaction.