CVE-2026-79721 Details
Description
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.
A vulnerability in the MLflow platform allows for arbitrary code execution through maliciously crafted model artifacts. This issue affects MLflow versions 0.0.1 and newer. When a model is loaded using the 'mlflow.pyfunc.load_model()' function, the model's 'MLmodel' configuration can specify a loader module and code directory. MLflow adds the code directory to the Python system path and imports the specified loader module, enabling execution of arbitrary code with the privileges of the process loading the model.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 8, 2026CISA-ADP
Assessed Sep 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.hiddenlayer.com/sai-security-advisory/2026-09-mlflow | HiddenLayer | AdvisoryExploitRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-829 | Inclusion of Functionality from Untrusted Control Sphere | HiddenLayer |
Affected Products
| Product | Versions |
|---|---|
| MLflow | >= 0.0.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | New CVE Received | HiddenLayer |
| Sep 8, 2026 | CVE Modified | CISA-ADP |