https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T03:10:35.893338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mlflow-2026-0596 BIT-mlflow-2026-0596 — Command Injection in mlflow/mlflow 2026-10-17T03:10:35.915821+00:00

Affected: Bitnami: mlflow

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.

 https://cve.radiocsirt.org/vuln/euvd-2026-278390 EUVD-2026-278390 2026-10-17T03:10:35.915916+00:00 EUVD-2026-278390 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0596 fkie_cve-2026-0596 2026-10-17T03:10:35.915933+00:00

A command injection vulnerability exists in mlflow/mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.

 https://cve.radiocsirt.org/vuln/ghsa-rvhj-8chj-8v3c GHSA-rvhj-8chj-8v3c — Mlflow: Command Injection when serving models with enable_mlserver=True 2026-10-17T03:10:35.915958+00:00

Affected: PyPI: mlflow

A command injection vulnerability exists in Mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.

 https://cve.radiocsirt.org/vuln/pysec-2026-424 PYSEC-2026-424 — Mlflow: Command Injection when serving models with enable_mlserver=True 2026-10-17T03:10:35.915997+00:00

Affected: PyPI: mlflow

A command injection vulnerability exists in Mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.