CVE-2026-79721: Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously craft
Summary
A vulnerability in MLflow (a platform for managing machine learning workflows) versions 0.0.1 and newer allows attackers to run arbitrary code (unrestricted commands) on a user's computer by creating a malicious model artifact (a saved machine learning model file) that executes when someone loads it into their project.
Vulnerability Details
EPSS: 0.0%
September 8, 2026
Classification
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-79721
First tracked: September 8, 2026 at 08:08 PM
Classified by LLM (prompt v3) · confidence: 92%