CVE-2026-118623 is a remote code execution vulnerability in MLflow related to insecure deserialization of pickle files. An attacker can exploit this by tricking a user into opening a malicious file or visiting a malicious page, leading to arbitrary code execution within the context of the MLflow process.