cve/2024/CVE-2024-37060.md
2025-09-29 21:09:30 +02:00

720 B
Raw Permalink Blame History

CVE-2024-37060

Description

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end users system when run.

POC

Reference

No PoCs from references.

Github