CVE-2026-79721 : 詳細

CVE-2026-79721

2026-09-08
19h19 +00:00
A08-Soft and Data Integrity Fail
2026-09-09
15h41 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

参考資料