Threats Tagged 'bit-mlflow-2026-0596'

A command injection vulnerability exists in mlflow/mlflow when serving a model with the option enable_mlserver=True. The model_uri parameter is embedded directly into a shell command executed via bash without proper sanitization, allowing an attacker to execute arbitrary commands if shell metacharacters are included. This can lead to privilege escalation if the service runs with higher privileges and serves models from directories writable by lower-privileged users. The vulnerability affects versions prior to 3.11.1 and is classified as critical.