CVE-2026-79721: MLflow Code Execution Vulnerability in Versions 0.0.1 and Newer
Summary
CVE-2026-79721: Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project. Affects mlflow versions >= 0.0.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MLflow is an open-source platform designed for managing the machine learning lifecycle, including experimentation, reproducibility, and deployment. It provides tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. However, versions 0.0.1 and newer are susceptible to a critical vulnerability that allows maliciously crafted model artifacts to execute arbitrary code on an end user's system when loaded.
Vulnerability Detail
The vulnerability arises from the way MLflow handles model artifacts. Specifically, when a user loads a model artifact that has been crafted with malicious intent, it can lead to arbitrary code execution on the user's system. This poses significant security risks, including unauthorized access to sensitive data, system compromise, and potential exploitation of the user's environment. The vulnerability affects all versions starting from 0.0.1, making it imperative for users to take immediate action to mitigate the risks associated with this flaw.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid loading untrusted model artifacts. Ensure that all model artifacts are sourced from trusted and verified sources to minimize the risk of executing malicious code.
Conclusion
The CVE-2026-79721 vulnerability in MLflow poses a serious risk to users by allowing arbitrary code execution through malicious model artifacts. It is crucial for users to update to the latest version of MLflow to mitigate this risk and ensure the security of their systems.
See every vulnerability recorded for mlflow →
FAQ
CVE-2026-79721 is a vulnerability in MLflow that allows arbitrary code execution through maliciously crafted model artifacts.
All versions of MLflow starting from 0.0.1 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, avoid loading untrusted model artifacts as a temporary workaround.
The consequences include unauthorized access to sensitive data, system compromise, and exploitation of the user's environment.
References
Related vulnerabilities
Recent vulnerabilities recorded for mlflow.
