CVE-2026-79721
2026-09-08
19h19 +00:00
19h19 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Inclusion of Functionality from Untrusted Control Sphere The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. |
