Threats tagged 'bit-mlflow-2024-37060'

A deserialization vulnerability exists in the MLflow platform versions 1.27.0 and newer up to but not including 2.14.2. This flaw allows a maliciously crafted Recipe to execute arbitrary code on an end user's system when run. The vulnerability is classified as high severity. A patch is available to address this issue.